Tripwire Whitelist Profiler 5.6.0 - Use of Third-Party Libraries

Name Selected License axis 1.4 (Apache 2.0) Apache License 2.0 axis-jaxrpc 1.4 (Apache 2.0) Apache License 2.0 axis-saaj 1.4 (Apache 2.0) Apache License 2.0 commons-beanutils 1.9.4 (Apache-2.0) Apache License 2.0 commons-codec 1.14.0 (Apache-2.0) Apache License 2.0 commons-collections 3.2.2 (Apache-2.0) Apache License 2.0 commons-collections4 4.4 (Apache-2.0) Apache License 2.0 commons-discovery 0.5 (Apache 2.0) Apache License 2.0 commons-io 2.6 (Apache-2.0) Apache License 2.0 commons-lang3 3.9 (Apache-2.0) Apache License 2.0 commons-logging 1.2 (Apache-2.0) Apache License 2.0 commons-text 1.8 (Apache-2.0) Apache License 2.0 fasterxml-jackson-databind 2.10.3 (Apache-2.0) Apache License 2.0 gson 2.8.6 (Apache-2.0) Apache License 2.0 guava 28.2 (Apache-2.0) Apache License 2.0 httpasyncclient 4.1.4 (Apache-2.0) Apache License 2.0 httpclient 4.5.12 (Apache-2.0) Apache License 2.0 httpcore 4.4.13 (Apache-2.0) Apache License 2.0 httpcore-nio 4.4.13 (Apache-2.0) Apache License 2.0 httpmime 4.5.12 (Apache-2.0) Apache License 2.0 jackson-annotations 2.10.3 (Apache-2.0) Apache License 2.0 jackson-core 2.10.3 (Apache-2.0) Apache License 2.0 jackson-datatype-jsr310 2.10.3 (Apache-2.0) Apache License 2.0 jansi 1.18 (Apache-2.0) Apache License 2.0 jcommander 1.74 (Apache-2.0) Apache License 2.0 log4j-over-slf4j 1.7.30 (Apache v2.0) Apache License 2.0 maven-artifact 3.6.3 (Apache-2.0) Apache License 2.0 opencsv 5.0 (Apache-2.0) Apache License 2.0 plexus-utils 3.3.0 (Apache-2.0) Apache License 2.0 jaxen 1.2.0 (BSD License 2.0) BSD Style/Attribution javax.mail 1.5.6 (CDDL-1.0) Common Development and Distribution License 1.0 axis-wsdl4J 1.5.1 (CPL 1.0) Common Public License logback-classic 1.2.3 (EPL-1.0) Eclipse Public License 1.0 logback-core 1.2.3 (EPL-1.0) Eclipse Public License 1.0 javax.persistence-api 2.2.3 (EPL-2.0) Eclipse Public License 2.0

Tripwire Whitelist Profiler 1 License Agreements Name Selected License jdom2 2.0.6 (JDOM License) JDOM License bc-fips 3.0.1 (Legion Of The Bouncy Castle License) Legion Of The Bouncy Castle License bcpkix-jdk15on 1.53 (Legion Of The Bouncy Castle Legion Of The Bouncy Castle License License) jsoup 1.13.1 (MIT) MIT License (Expat) kong-unirest-java 3.6.01 (MIT) MIT License (Expat) kong-unirest-objectnapper-jackson 3.6.01 (MIT) MIT License (Expat) slf4j-api 1.7.30 (MIT) MIT License (Expat)

Tripwire Whitelist Profiler 5.6.0 - Third-Party Notices Report

Third-Party Notices Report__Whitlist Profiler_5.6.0 for PS WLP Latest

Generated on Thursday, July 9, 2020 at 8:35 PM

Download Report

[axis 1.4 (Apache 2.0)]

Copyright Statements ======NOTICE file corresponding to section 4(d) of the Apache License, == == Version 2.0, in this case for the Apache Axis distribution. ======

This product includes software developed by The Apache Software Foundation (http://www.apache.org/).

License Text (http://spdx.org/licenses/Apache-2.0)

[axis-jaxrpc 1.4 (Apache 2.0)]

License Text (http://spdx.org/licenses/Apache-2.0)

[axis-saaj 1.4 (Apache 2.0)]

License Text (http://spdx.org/licenses/Apache-2.0)

[axis-wsdl4J 1.5.1 (CPL 1.0)]

License Text (http://spdx.org/licenses/CPL-1.0) All use of the wsdl4j is governed by the following terms:

Tripwire disclaims on behalf of all Contributors to wsdl4j all warranties and conditions, express and implied, including warranties or conditions of title and non-infringement, and implied warranties or conditions of merchantability and fitness for a particular purpose;

Tripwire excludes on behalf of all Contributors to wsdl4j all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;

Any provisions of any license from a specific Contributor to wsdl4j which differ from the Common Public License v. 1.0 are offered by that relevant Contributor alone and not by any other party; and

Source materials are available for download at: http://sourceforge.net/projects/wsdl4j/files

[bc-fips 3.0.1 (Legion Of The Bouncy Castle License)]

License Text ()

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

Tripwire Whitelist Profiler 3 License Agreements FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

[bcpkix-jdk15on 1.53 (Legion Of The Bouncy Castle License)]

License Text ()

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

[commons-beanutils 1.9.4 (Apache-2.0)]

License Text (http://spdx.org/licenses/Apache-2.0.html)

[commons-codec 1.14.0 (Apache-2.0)]

Tripwire Whitelist Profiler 4 License Agreements This product includes software developed at The Apache Software Foundation (https://www.apache.org/). src/test/org/apache/commons/codec/language/DoubleMetaphoneTest.java contains test data from http://aspell.net/test/orig/batch0.tab. Copyright (C) 2002 Kevin Atkinson ([email protected])

======

The content of package org.apache.commons.codec.language.bm has been translated from the original php source code available at http://stevemorse.org/phoneticinfo.htm with permission from the original authors. Original source copyright: Copyright (c) 2008 Alexander Beider & Stephen P. Morse.

License Text (http://spdx.org/licenses/Apache-2.0.html)

[commons-collections 3.2.2 (Apache-2.0)]

This product includes software developed by The Apache Software Foundation (http://www.apache.org/).

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[commons-collections4 4.4 (Apache-2.0)]

License Text (https://www.apache.org/licenses/LICENSE-2.0.txt)

[commons-discovery 0.5 (Apache 2.0)]

Tripwire Whitelist Profiler 5 License Agreements

License Text (http://spdx.org/licenses/Apache-2.0.html)

[commons-io 2.6 (Apache-2.0)]

License Text (https://www.apache.org/licenses/LICENSE-2.0.txt)

[commons-lang3 3.9 (Apache-2.0)]

License Text (https://www.apache.org/licenses/LICENSE-2.0.txt)

[commons-logging 1.2 (Apache-2.0)]

This product includes software developed at The Apache Software Foundation (http://www.apache.org/).

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[commons-text 1.8 (Apache-2.0)]

This product includes software developed at The Apache Software Foundation (https://www.apache.org/).

License Text (https://www.apache.org/licenses/LICENSE-2.0.txt)

Tripwire Whitelist Profiler 6 License Agreements -

[fasterxml-jackson-databind 2.10.3 (Apache-2.0)]

Jackson is a high-performance, Free/Open Source JSON processing library. It was originally written by Tatu Saloranta ([email protected]), and has been in development since 2007. It is currently developed by a community of developers, as well as supported commercially by FasterXML.com.

## Licensing

Jackson core and extension components may be licensed under different licenses. To find the details that apply to this artifact see the accompanying LICENSE file. For more information, including possible other licensing options, contact FasterXML.com (http://fasterxml.com).

## Credits

A list of contributors may be found from CREDITS file, which is included in some artifacts (usually source distributions); but is always available from the source code management (SCM) system project uses.

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[gson 2.8.6 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt) -

[guava 28.2 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt) -

[httpasyncclient 4.1.4 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

Tripwire Whitelist Profiler 7 License Agreements -

[httpclient 4.5.12 (Apache-2.0)]

This product includes software developed at The Apache Software Foundation (http://www.apache.org/).

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[httpcore 4.4.13 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[httpcore-nio 4.4.13 (Apache-2.0)]

This product includes software developed at The Apache Software Foundation (http://www.apache.org/).

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[httpmime 4.5.12 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[jackson-annotations 2.10.3 (Apache-2.0)]

Tripwire Whitelist Profiler 8 License Agreements Copyright Statements This copy of Jackson JSON processor annotations is licensed under the Apache (Software) License, version 2.0 ("the License"). See the License for details about distribution rights, and the specific rights regarding derivate works.

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[jackson-core 2.10.3 (Apache-2.0)]

## Licensing

Jackson core and extension components may licensed under different licenses. To find the details that apply to this artifact see the accompanying LICENSE file. For more information, including possible other licensing options, contact FasterXML.com (http://fasterxml.com).

## Credits

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[jackson-datatype-jsr310 2.10.3 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt) Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and

Tripwire Whitelist Profiler 9 License Agreements limitations under the License.

[jansi 1.18 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt) -

[javax.mail 1.5.6 (CDDL-1.0)]

License Text (http://spdx.org/licenses/CDDL-1.0.html) The library is governed by the Open Source Initiative OSI - Common Development and Distribution License (CDDL 1.0).

Source materials are available for download at: https://javaee.github.io/javamail/

[javax.persistence-api 2.2.3 (EPL-2.0)]

License Text (https://spdx.org/licenses/EPL-2.0.html) All use of this Library is governed by the following terms:

Tripwire disclaims on behalf of all Contributors to the Library all warranties and conditions,express and implied, including warranties or conditions of title and non-infringement, and implied warranties or conditions of merchantability and fitness for a particular purpose;

Tripwire disclaims on behalf of all Contributors to the Library all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;

Any provisions of any license from a specific Contributor to the Library which differ from the Eclipse Public License v2.0 are offered by that relevant Contributor alone and not by any other party; an

Source materials are available for download at: https://repo1.maven.org/maven2/javax/persistence/javax.persistence-api

[jaxen 1.2.0 (BSD License 2.0)]

License Text (http://www.opensource.org/licenses/bsd-license.html)

Tripwire Whitelist Profiler 10 License Agreements

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

* Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

* Neither the name of the Jaxen Project nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

[jcommander 1.74 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[jdom2 2.0.6 (JDOM License)]

License Text (http://www.jdom.org/docs/faq.html#a0030)

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions, and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright

Tripwire Whitelist Profiler 11 License Agreements notice, this list of conditions, and the disclaimer that follows these conditions in the documentation and/or other materials provided with the distribution.

3. The name "JDOM" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact .

4. Products derived from this software may not be called "JDOM", nor may "JDOM" appear in their name, without prior written permission from the JDOM Project Management .

In addition, we request (but do not require) that you include in the end-user documentation provided with the redistribution and/or in the software itself an acknowledgement equivalent to the following: "This product includes software developed by the JDOM Project (http://www.jdom.org/)." Alternatively, the acknowledgment may be graphical using the logos available at http://www.jdom.org/images/logos.

THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE JDOM AUTHORS OR THE PROJECT CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

[jsoup 1.13.1 (MIT)]

License Text (https://jsoup.org/license)

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

Tripwire Whitelist Profiler 12 License Agreements FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

[kong-unirest-objectnapper-jackson 3.6.01 (MIT)]

License Text (http://opensource.org/licenses/MIT)

The MIT License

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

[log4j-over-slf4j 1.7.30 (Apache v2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt) -

[logback-classic 1.2.3 (EPL-1.0)]

License Text (http://www.eclipse.org/legal/epl-v10.html) All use of this Library is governed by the following terms:

Tripwire disclaims on behalf of all Contributors to the Library all warranties and conditions,

Tripwire Whitelist Profiler 13 License Agreements express and implied, including warranties or conditions of title and noninfringement, and implied warranties or conditions of merchantability and fitness for a particular purpose;

Tripwire disclaims on behalf of all Contributors to the Library all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;

Any provisions of any license from a specific Contributor to the Library which differ from the

Eclipse Public License v. 1.0 are offered by that relevant Contributor alone and not by any other party; and

Source materials are available for download at: http://logback.qos.ch

[logback-core 1.2.3 (EPL-1.0)]

License Text (http://www.eclipse.org/legal/epl-v10.html) All use of this Library is governed by the following terms:

Tripwire disclaims on behalf of all Contributors to the Library all warranties and conditions, express and implied, including warranties or conditions of title and noninfringement, and implied warranties or conditions of merchantability and fitness for a particular purpose;

Tripwire disclaims on behalf of all Contributors to the Library all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;

Any provisions of any license from a specific Contributor to the Library which differ from the Common Public License v. 1.0 are offered by that relevant Contributor alone and not by any other party; and

Source materials are available for download at: https://logback.qos.ch/download.html

Tripwire Whitelist Profiler 14 License Agreements

[maven-artifact 3.6.3 (Apache-2.0)]

This product includes software developed at The Apache Software Foundation (http://www.apache.org/).

License Text (https://www.apache.org/licenses/LICENSE-2.0.txt)

[opencsv 5.0 (Apache-2.0)]

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[plexus-utils 3.3.0 (Apache-2.0)]

Copyright Statements This product includes software developed by the Indiana University Extreme! Lab (http://www.extreme.indiana.edu/).

This product includes software developed by The Apache Software Foundation (http://www.apache.org/).

This product includes software developed by ThoughtWorks (http://www.thoughtworks.com).

This product includes software developed by javolution (http://javolution.org/).

This product includes software developed by Rome (https://rome.dev.java.net/).

License Text (http://www.apache.org/licenses/LICENSE-2.0.txt)

[slf4j-api 1.7.30 (MIT)]

License Text (http://www.opensource.org/licenses/mit-license.php)

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

[unirest-java/unirest-objectmapper-jackson 3.6.01 (MIT)]

License Text (http://opensource.org/licenses/MIT)

The MIT License

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

Tripwire Whitelist Profiler 16 License Agreements

Tripwire Whitelist Profiler 17 License Agreements