Linux Foundation License Scan report

Project: onap
Subproject: (all subprojects)
Snapshot on: 2020-03 (show repos)
aaf ed25e044
aaf/authz add60903
aaf/cadi f43bf4c2
aaf/certservice d43531d4
aaf/luaplugin 1abad05a
aaf/oom 6cd84c4e
aaf/sms 8b9a5a06
aaf/sshsm 8b829841
aai/aai-common 6f0577db
aai/babel e5f7f4db
aai/cacher 33d472ed
aai/data-router 151cf374
aai/esr-gui ae14506d
aai/esr-server 0d3e47e3
aai/event-client ff115760
aai/graphadmin 9b65b712
aai/graphgraph 20617c2e
aai/logging-service b6c4be4e
aai/model-loader 838331e0
aai/oom c9fad710
aai/resources 363cf6f7
aai/rest-client 781bf18a
aai/router-core f94ea25a
aai/schema-service e5ad56ac
aai/search-data-service f7a15360
aai/sparky-be c4fe0166
aai/sparky-fe aa38485b
aai/test-config 799470ca
aai/traversal 5f44aa2c
aai/validation 0096841f
appc 90732f0d
appc/cdt 179fea04
appc/deployment 981457ea
appc/oom be4d1a62
appc/parent d07cfaa6
ccsdk 651b0dc3
ccsdk/apps 1ba9e49a
ccsdk/cds c2c37924
ccsdk/dashboard 20759cc3
ccsdk/distribution 9c100ae1
ccsdk/features 04e519c3
ccsdk/parent 35d60797
ccsdk/platform/blueprints 0bb45f0d
ccsdk/platform/plugins 9ca8e4a4
ccsdk/sli/adaptors d95c9b66
ccsdk/sli/core a0f9f9bf
ccsdk/sli/northbound 66ce8b86
ccsdk/sli/plugins ccc9dffe
ccsdk/storage/esaas 988a69e4
ccsdk/utils c21049bc
clamp f0e00e7c
clamp/dashboard 8d898788
clamp/oom 123ac572
clamp/ui ca24597b
cli bc3ff3a7
cli/oom 170429be
dcaegen2 729478d0
dcaegen2/analytics 2a2651d6
dcaegen2/analytics/flink 1cf99c05
dcaegen2/analytics/pnda 11e6fe89
dcaegen2/analytics/tca 8926e9c7
dcaegen2/analytics/tca-gen2 8a31068c
dcaegen2/collectors 68157fc0
dcaegen2/collectors/datafile b788d2dd
dcaegen2/collectors/hv-ves bec3214d
dcaegen2/collectors/restconf 0d6c7227
dcaegen2/collectors/snmptrap 4d1fa90a
dcaegen2/collectors/ves 2921e86e
dcaegen2/deployments 0607370d
dcaegen2/oom 910aa429
dcaegen2/platform 2b2aa997
dcaegen2/platform/blueprints 483be066
dcaegen2/platform/configbinding 2776802a
dcaegen2/platform/deployment-handler dbab04e8
dcaegen2/platform/inventory-api e23d317a
dcaegen2/platform/plugins a741ebe7
dcaegen2/platform/policy-handler 78ff88f9
dcaegen2/platform/servicechange-handler dc4ee471
dcaegen2/services e0fa69fa
dcaegen2/services/heartbeat a9e77b57
dcaegen2/services/mapper fa408578
dcaegen2/services/pm-mapper 5479d1fa
dcaegen2/services/prh b3d3b52b
dcaegen2/services/sdk 7f83d709
dcaegen2/services/son-handler ebd13180
dcaegen2/utils 09f97857
demo 367417cd
dmaap 135fd248
dmaap/buscontroller b4dc85f8
dmaap/datarouter bf72b339
dmaap/dbcapi 0c5fb021
dmaap/kafka11aaf d1118202
dmaap/messagerouter/dmaapclient edb718f3
dmaap/messagerouter/messageservice 4dd6518e
dmaap/messagerouter/mirroragent 0baa4894
dmaap/messagerouter/msgrtr 99358c72
dmaap/oom 523fc9b6
dmaap/zookeeper 57b4deb6
doc 9b932d2c
doc/tools 45a27c3f
esr/oom 7b976293
externalapi db828a40
externalapi/nbi 0360da34
holmes 8e778102
holmes/common 4e3afdcb
holmes/engine-management dfdac23d
holmes/rule-management ad6dd88c
integration 5d8a1df2
integration/csit d1a3a8cc
integration/docker/onap-baseline 1116e46f
integration/docker/onap-java11 b29c3e7c
integration/docker/onap-python3.7 1116e46f
integration/seccom 80f584b0
integration/simulators/ran-simulator d04a02b3
integration/xtesting 3c64be99
logging-analytics 7748e305
logging-analytics/pomba 96789a2c
logging-analytics/pomba/pomba-aai-context-builder 2624889c
logging-analytics/pomba/pomba-audit-common 739a86ee
logging-analytics/pomba/pomba-context-aggregator 3ad11e47
logging-analytics/pomba/pomba-network-discovery-context-builder 942ca53c
logging-analytics/pomba/pomba-sdc-context-builder e2cc8239
logging-analytics/pomba/pomba-sdnc-context-builder 70371435
modeling/etsicatalog 1a1e716e
modeling/modelspec 9e24ecc3
modeling/toscaparsers 5eadbf10
msb a49a93db
msb/apigateway 9a4e1a48
msb/discovery f6d018ad
msb/java-sdk 4772eda5
msb/oom 93450fcc
msb/service-mesh 658103bb
msb/swagger-sdk 76b75128
multicloud 04374a62
multicloud/azure 0d27f9e5
multicloud/framework e6a4b2a5
multicloud/k8s a2c24489
multicloud/oom 2496f2a8
multicloud/openstack 987fdf56
multicloud/openstack/vmware 6b22d1d7
multicloud/openstack/windriver f4e7c738
music 84ca96a1
music/distributed-kv-store 727a7d8e
music/mdbc 9eaa8205
music/prom 03fe9475
nbi/oom 6150550c
oof/oom f745deb0
oom 0ce0c3d5
oom/offline-installer 52dc3d05
oom/registrator e8adf17d
oparent 96021c83
oparent/cia c5f63312
optf dcdf0245
optf/cmso 815b12b8
optf/fgps fa37b982
optf/has 7422ddaf
optf/osdf 2e2d7f66
osa 06f9c404
pnda/oom 8f6a8ca7
policy/apex-pdp a9b60303
policy/api 5949dbc9
policy/common 41c956dc
policy/distribution 7478d8a9
policy/docker e2e4f049
policy/drools-applications b3a65de5
policy/drools-pdp bbcf7265
policy/engine 4c11f641
policy/gui 7fa12fdd
policy/models 78fea642
policy/oom e0039e5c
policy/pap 887eeabc
policy/parent c0b0ed66
policy/xacml-pdp 98a45737
pomba/oom daeda4ef
portal 4d894a76
portal/oom 91dadff8
portal/sdk c609ff24
robot/oom 20510547
sdc 9b0f5789
sdc/dcae-d/ci 291505bd
sdc/dcae-d/dt cb3dda5c
sdc/dcae-d/dt-be-main 852ccb9f
sdc/dcae-d/dt-be-property 96baeb2c
sdc/dcae-d/fe 75fd847d
sdc/dcae-d/rule-engine 9735a068
sdc/dcae-d/tosca-lab 290b3dd9
sdc/microservices f07318db
sdc/onap-ui-angular 1224fe70
sdc/onap-ui-common 8534023e
sdc/onap-ui-react b4ca5a9e
sdc/oom 66864f09
sdc/sdc-be-common 154541d2
sdc/sdc-distribution-client 0aae60b7
sdc/sdc-docker-base a0200b7f
sdc/sdc-pubsub ebec31d1
sdc/sdc-tosca be6b52d1
sdc/sdc-workflow-designer cdff1c49
sdnc/apps 78eb251a
sdnc/northbound a8a9efa6
sdnc/oam 92555a71
sdnc/oom 0f0b0405
sniro-emulator/oom 5f431c1c
so 03117ffc
so/chef-repo 0f048dae
so/docker-config 1f1a17e1
so/libs c4c4bbdc
so/oom 12826244
so/so-config 82ac3663
spark-model-runner 1bd105ed
test/oom 3a0939a5
testsuite 34c77b76
testsuite/heatbridge e09b887c
testsuite/oom 591bfdea
testsuite/python-testing-utils cbf9af30
usecase-ui 51b63f1d
usecase-ui/server adee87e7
uui/oom 588dbdcf
vfc 3ab6cafd
vfc/gvnfm/vnflcm bc270e9b
vfc/gvnfm/vnfmgr 4c9693ce
vfc/gvnfm/vnfres 01b30541
vfc/nfvo/catalog 60a0f1e0
vfc/nfvo/db 5f2f9183
vfc/nfvo/driver/ems e8999728
vfc/nfvo/driver/sfc edbd7537
vfc/nfvo/driver/vnfm/gvnfm e98c3e88
vfc/nfvo/driver/vnfm/svnfm 00789ff1
vfc/nfvo/lcm 7c61fa5d
vfc/nfvo/multivimproxy 232a02fd
vfc/nfvo/resmanagement fdfe7b30
vfc/nfvo/wfengine c76f28ff
vfc/oom 569f1e11
vid f7c41b1c
vid/oom d599c7b4
vnfrqts 394ee17a
vnfrqts/epics 45db5207
vnfrqts/guidelines 7ed04df0
vnfrqts/requirements 3283a327
vnfrqts/testcases 1d73745e
vnfrqts/usecases a41f0e79
vnfsdk 0e285ec1
vnfsdk/dovetail-integration 2720441e
vnfsdk/functest 88f2d3e2
vnfsdk/lctest 19421c9c
vnfsdk/model 6b71b531
vnfsdk/oom 05d55d91
vnfsdk/pkgtools fb75c2fc
vnfsdk/refrepo dd4a42d4
vnfsdk/validation 222fe26e
vnfsdk/ves-agent a4a27095
vvp 7c3586e9
vvp/documentation 2872e33b
vvp/engagementmgr 0c8ea890
vvp/oom 089d1489
vvp/regression-tests 06cf61fe
vvp/test-engine d7d8722c
vvp/validation-scripts 35515ab9

Key findings:

Finding #1
Priority: Very High
This file is under GPL-2.0, which is typically seen as a strong copyleft license. This file should likely be removed from the repo.
1 file (show files)
multicloud-k8s/kud/tests/sdwan/build/commands.lua
Finding #2
Priority: High
This file contains source code licensed under EPL-1.0, typically seen as a weak copyleft license. Although the TSC has previously granted license exceptions for EPL-1.0 *XML files* from OpenDaylight, they have typically not approved EPL-1.0 *source code* in ONAP. This file should likely be removed.
3 files (show files)
ccsdk-distribution/opendaylight/neon/neon-alpine/src/main/odlscripts/configure-cluster-ipdetect.sh
ccsdk-distribution/opendaylight/neon/neon-alpine/src/main/odlscripts/configure_cluster.sh
ccsdk-distribution/opendaylight/neon/neon-alpine/src/main/odlscripts/set_persistence.sh
Finding #3
Priority: Low
This file's license header correctly lists the project licenses, but it appears to have been corrupted by a find-and-replace error. Recommend replacing it with the standard ONAP license header.
1 file (show files)
portal/portal-FE-common/src/app/shared/model/widget-onboarding/widget.ts

License summary:

Project licenses:
  Apache-2.0   47347
  Apache-2.0 (ASF license header)   377
  Apache-2.0 (list of dependencies)   2
  Apache-2.0 AND CC-BY-4.0   3976
  Apache-2.0 OR EPL-1.0   31
  CC-BY-4.0   1541
Copyleft:
  EPL-1.0   4
  GPL-2.0   1
Advertising clause:
  OpenSSL AND BSD-2-Clause   1
Check license statement:
  Apache-2.0 AND CC-BY-4.0 (find-and-replace error)   1
Attribution:
  Apache (version unspecified, from upstream)   1
  Apache-2.0 AND (MIT OR GPL (version unspecified))   1
  Apache-2.0 AND (MIT OR GPL-2.0-only)   3
  Apache-2.0 AND (MIT OR GPL-3.0-only)   1
  Apache-2.0 AND BSD (version unspecified) and Public domain statement   1
  Apache-2.0 AND BSD-2-Clause AND MIT   1
  Apache-2.0 AND BSD-3-Clause   2
  Apache-2.0 AND BSD-3-Clause AND MIT   9
  Apache-2.0 AND CC-BY-4.0 AND MIT   14
  Apache-2.0 AND MIT   124
  Apache-2.0 AND MIT AND OFL-1.1   1
  Apache-2.0 AND curl AND MIT   3
  BSD-2-Clause   440
  BSD-3-Clause   183
  BSD-3-Clause AND MIT   2
  BSD-style-O-RAN-Alliance   2
  CC-BY-3.0   7
  CC-BY-3.0 AND MIT   6
  CC-BY-4.0 AND MIT   5
  CC-BY-4.0 AND Public domain statement   1
  FSFAP   1
  FSFULLR   1
  ISC   9
  LicenseRef-BSD-2-Clause-vector   1
  MIT   1240
  MIT AND (MIT OR GPL-2.0-only) AND (Apache-2.0 OR LGPL-3.0-only)   2
  MIT AND Apache-2.0 AND CC-BY-3.0 AND (MIT OR BSD-3-Clause) AND (MIT OR GPL-3.0-only)   1
  MIT OR GPL (version unspecified)   7
  MIT OR GPL-2.0-only   10
  MIT OR GPL-3.0-only   2
Other:
  Apache-2.0 AND CC-BY-4.0 AND CC-BY-SA-4.0   1
  CC-BY-3.0 AND MIT AND OFL-1.1   2
  CC-BY-SA-4.0   1
  CC0-1.0   1
  Google Patent Notice (Golang)   3
  MIT AND OFL-1.1   3
  OFL-1.1   22
  Public domain statement with license statement   6
No license found:
  No license found in file   29398
  No license found in file - excluded file extension   10339
  No license found in file - empty file   805
  No license found in file - third party directory   1196
TOTAL   97139  

Counts are numbers of files detected in the scanned repos.


Please contact Steve Winslow (swinslow@linuxfoundation.org) with any questions, comments, etc. regarding this report.