Skip to content

Commit 8618f3a

Browse files
chadlwilsonchadlwilson
committed
chore: include list of third party dependencies and their licenses in each artifact
Replace the outdated embedded static files with license-maven-plugin. Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
1 parent 4a03188 commit 8618f3a

33 files changed

Lines changed: 101 additions & 1829 deletions

File tree

‎NOTICE.txt‎

Lines changed: 4 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,9 @@
11
dependency-check
22

3-
Copyright (c) 2012-2025 OWASP Dependency-Check Contributors. All Rights Reserved.
4-
5-
The licenses for the software listed below can be found in the META-INF/licenses/[dependency name].
6-
7-
This product includes software developed by The Apache Software Foundation (http://www.apache.org/).
8-
9-
This product includes software developed by Jquery.com (http://jquery.com/).
10-
11-
This product includes software developed by Jonathan Hedley (jsoup.org)
12-
13-
This software contains unmodified binary redistributions for H2 database engine (http://www.h2database.com/), which is dual licensed and available under a modified version of the MPL 1.1 (Mozilla Public License) or under the (unmodified) EPL 1.0 (Eclipse Public License).
14-
An original copy of the license agreement can be found at: http://www.h2database.com/html/license.html
3+
Copyright (c) 2012-2026 Jeremy Long. All Rights Reserved.
154

165
This product includes data from the Common Weakness Enumeration (CWE): http://cwe.mitre.org/
176

18-
This product downloads and utilizes data from the National Vulnerability Database hosted by NIST: http://nvd.nist.gov/download.cfm
7+
This product downloads and utilizes data from the National Vulnerability Database hosted by NIST: http://nvd.nist.gov/download.cfm
8+
9+
This product includes third party software, whose licenses are enumerated at META-INF/THIRD-PARTY.txt in built distributions.

‎README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -368,7 +368,7 @@ Dependency-Check makes use of several other open source libraries. Please see th
368368

369369
This product uses the NVD API but is not endorsed or certified by the NVD.
370370

371-
Copyright (c) 2012-2025 Jeremy Long. All Rights Reserved.
371+
Copyright (c) 2012-2026 Jeremy Long. All Rights Reserved.
372372

373373
[wiki]: https://github.com/dependency-check/DependencyCheck/wiki
374374
[notices]: https://github.com/dependency-check/DependencyCheck/blob/main/NOTICE.txt

‎ant/NOTICE.txt‎

Lines changed: 4 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,9 @@
1-
OWASP dependency-check
1+
dependency-check-ant
22

3-
Copyright (c) 2012-2015 Jeremy Long. All Rights Reserved.
4-
5-
The licenses for the software listed below can be found in the META-INF/licenses/[dependency name].
6-
7-
This product includes software developed by The Apache Software Foundation (http://www.apache.org/).
8-
9-
This product includes software developed by Jquery.com (http://jquery.com/).
10-
11-
This product includes software developed by Jonathan Hedley (jsoup.org)
12-
13-
This software contains unmodified binary redistributions for H2 database engine (http://www.h2database.com/), which is dual licensed and available under a modified version of the MPL 1.1 (Mozilla Public License) or under the (unmodified) EPL 1.0 (Eclipse Public License).
14-
An original copy of the license agreement can be found at: http://www.h2database.com/html/license.html
3+
Copyright (c) 2012-2026 Jeremy Long. All Rights Reserved.
154

165
This product includes data from the Common Weakness Enumeration (CWE): http://cwe.mitre.org/
176

187
This product downloads and utilizes data from the National Vulnerability Database hosted by NIST: http://nvd.nist.gov/download.cfm
8+
9+
This product includes third party software, whose licenses are enumerated at META-INF/THIRD-PARTY.txt in built distributions.

‎ant/README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ Documentation and links to production binary releases can be found on the [githu
1212
Copyright & License
1313
-------------------
1414

15-
Dependency-Check is Copyright (c) 2012-2014 Jeremy Long. All Rights Reserved.
15+
Dependency-Check is Copyright (c) 2012-2026 Jeremy Long. All Rights Reserved.
1616

1717
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://github.com/dependency-check/DependencyCheck/blob/main/LICENSE.txt) file for the full license.
1818

‎ant/pom.xml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,13 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved.
5858
<include>NOTICE.txt</include>
5959
</includes>
6060
</resource>
61+
<resource>
62+
<directory>${license.outputDirectory}</directory>
63+
<targetPath>META-INF</targetPath>
64+
<includes>
65+
<include>THIRD-PARTY.txt</include>
66+
</includes>
67+
</resource>
6168
</resources>
6269
<testResources>
6370
<testResource>

‎ant/src/main/assembly/release.xml‎

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -12,15 +12,6 @@
1212
<format>zip</format>
1313
</formats>
1414
<includeBaseDirectory>false</includeBaseDirectory>
15-
<!--fileSets>
16-
<fileSet>
17-
<outputDirectory>dependency-check</outputDirectory>
18-
<directory>${project.build.directory}</directory>
19-
<includes>
20-
<include>dependency-check*.jar</include>
21-
</includes>
22-
</fileSet>
23-
</fileSets-->
2415
<files>
2516
<file>
2617
<source>${project.build.directory}/${project.artifactId}-${project.version}.jar</source>

‎ant/src/main/resources/META-INF/licenses/ant/LICENSE.txt‎

Lines changed: 0 additions & 202 deletions
This file was deleted.

‎cli/NOTICE.txt‎

Lines changed: 4 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,9 @@
11
dependency-check-cli
22

3-
Copyright (c) 2013 Jeremy Long. All Rights Reserved.
4-
5-
The licenses for the software listed below can be found in the licenses.
6-
7-
This product includes software developed by The Apache Software Foundation (http://www.apache.org/).
8-
9-
This product includes software developed by Jquery.com (http://jquery.com/).
10-
11-
This product includes software developed by Jonathan Hedley (jsoup.org)
12-
13-
This software contains unmodified binary redistributions for H2 database engine (http://www.h2database.com/), which is dual licensed and available under a modified version of the MPL 1.1 (Mozilla Public License) or under the (unmodified) EPL 1.0 (Eclipse Public License).
14-
An original copy of the license agreement can be found at: http://www.h2database.com/html/license.html
3+
Copyright (c) 2012-2026 Jeremy Long. All Rights Reserved.
154

165
This product includes data from the Common Weakness Enumeration (CWE): http://cwe.mitre.org/
176

18-
This product downloads and utilizes data from the National Vulnerability Database hosted by NIST: http://nvd.nist.gov/download.cfm
7+
This product downloads and utilizes data from the National Vulnerability Database hosted by NIST: http://nvd.nist.gov/download.cfm
8+
9+
This product includes third party software, whose licenses are enumerated at META-INF/THIRD-PARTY.txt in built distributions.

‎cli/README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ Documentation and links to production binary releases can be found on the [githu
1111
Copyright & License
1212
------------
1313

14-
Dependency-Check is Copyright (c) 2012-2014 Jeremy Long. All Rights Reserved.
14+
Dependency-Check is Copyright (c) 2012-2026 Jeremy Long. All Rights Reserved.
1515

1616
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://github.com/dependency-check/DependencyCheck/blob/main/cli/LICENSE.txt) file for the full license.
1717

‎cli/pom.xml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved.
4848
<includes>
4949
<include>completion-for-dependency-check.sh</include>
5050
</includes>
51-
<targetPath>../release/bin</targetPath>
51+
<targetPath>../release/bin</targetPath>
5252
</resource>
5353
<resource>
5454
<directory>${basedir}</directory>
@@ -58,6 +58,13 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved.
5858
<include>NOTICE.txt</include>
5959
</includes>
6060
</resource>
61+
<resource>
62+
<directory>${license.outputDirectory}</directory>
63+
<targetPath>META-INF</targetPath>
64+
<includes>
65+
<include>THIRD-PARTY.txt</include>
66+
</includes>
67+
</resource>
6168
</resources>
6269
<plugins>
6370
<plugin>

0 commit comments

Comments
 (0)