---------------------------------- BigFix Inventory 10.0 July 2021 ---------------------------------- ------------------------------------------------------------------------- ------------------------------------------------------------------------- The HCL license agreement and any applicable information on the web download page for HCL products refers Licensee to this file for details concerning notices applicable to code included in the products listed above ("the Program"). Notwithstanding the terms and conditions of any other agreement Licensee may have with HCL or any of its related or affiliated entities (collectively "HCL"), the third party code identified below is subject to the terms and conditions of the HCL license agreement for the Program and not the license terms that may be contained in the notices below. The notices are provided for informational purposes. Please note: This Notices file may identify information that is not used by, or that was not shipped with, the Program as Licensee installed it. IMPORTANT: HCL does not represent or warrant that the information in this NOTICES file is accurate. Third party websites are independent of HCL and HCL does not represent or warrant that the information on any third party website referenced in this NOTICES file is accurate. HCL disclaims any and all liability for errors and omissions or for any damages accruing from the use of this NOTICES file or its contents, including without limitation URLs or references to any third party websites. ------------------------------------------------------------------------- ------------------------------------------------------------------------- Platform inclusion: The Platform is the base infrastructure for the BigFix product and is included as the foundation of all BigFix products. It is handled as a separate notices file due to the nature of the product delivery. Latest Version for all Notices can be found here: https://support.bigfix.com/thirdparty.html <<START OF Inventory 10.0.5>> ====== DETAIL 1: Inventory 10.0.5 ====== License Library Description License Reference Copyrights Homepage Author Apache 2.0 addressable-2.8.0.gem "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. It is flexible, offers heuristic parsing, and additionally provides extensive support for IRIs and URI templates. " https://rubygems.org/gems/addressable/versions/2.8.0 Copyright Bob Aman</dd> https://github.com/sporkmonger/addressable Bob Aman Apache 2.0 carbon-components-9.48.2.tgz Carbon Components is a component library for IBM Cloud https://www.npmjs.org/package/carbon-components 2015 Copyright 2015 IBM Corp http://carbondesignsystem.com/ Apache 2.0 carbon-components-react-6.60.1.tgz A React wrapper for carbon- components https://www.npmjs.org/package/carbon-components-react https://github.com/IBM/carbon-components-react#readme Apache 2.0 carbon-icons-7.0.5.tgz Icons for the Carbon Design System https://www.npmjs.org/package/carbon-icons https://github.com/carbon-design-system/carbon-icons#readme Apache 2.0 commons-codec-1.14.jar "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities." "2008 Copyright 2008 Alexander Beider & Stephen P 2002-2019 Copyright 2002-2019 The Apache Software Foundation 2002 Copyright 2002 Kevin Atkinson ([email protected])" https://commons.apache.org/proper/commons-codec/ The Apache Software Foundation Apache 2.0 commons-compress-1.20.jar "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200,lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj." "2002-2020 Copyright 2002-2020 The Apache Software Foundation 1996-2019 Copyright 1996-2019 Julian R Seward" https://commons.apache.org/proper/commons-compress/ The Apache Software Foundation Apache 2.0 log4j-api-2.13.3.jar http://archive.apache.org/dist/logging/log4j/2.13.3/apache-log4j- 2.13.3-bin.zip 1999-2020 Copyright 1999-2020 The Apache Software Foundation http://archive.apache.org/dist/logging/log4j/2.13.3/apache- log4j-2.13.3-bin.zip Eclipse Apache 2.0 log4j-core-2.13.3.jar http://archive.apache.org/dist/logging/log4j/2.13.3/apache-log4j- 2.13.3-bin.zip "1999-2020 Copyright 1999-2020 The Apache Software Foundation 1999-2005 Copyright 1999-2005 The Apache Software Foundation 2004 Copyright 2004 Jason Paul Kitchen 2005-2006 Copyright 2005-2006 Tim Fennell 1999-2012 Copyright 1999-2012 Apache Software Foundation" http://archive.apache.org/dist/logging/log4j/2.13.3/apache-log4j- 2.13.3-bin.zip Eclipse Apache 2.0 marcel-1.0.1.gem* https://rubygems.org/gems/marcel/versions/1.0.1 2017 Copyright 2017 Tom Ward https://github.com/rails/marcel Tom Ward Apache 2.0 snakeyaml-1.26.jar Snakeyaml shaded for configuration-as- code plugin https://bitbucket.org/asomov/snakeyaml/src/snakeyaml- 1.26/LICENSE.txt Apache 2.0 snakeyaml-1.26.jar YAML 1.1 parser and emitter for Java Unspecified Copyright http://www.snakeyaml.org Apache 2.0 thread_safe-0.3.6-java.gem A collection of data structures and utilities to make thread-safe programming in Ruby easier https://rubygems.org/gems/thread_safe/versions/0.3.6 https://github.com/ruby-concurrency/thread_safe Charles Oliver Nutter, thedarkone Apache 2.0 websocket-driver-0.7.3-java.gem https://rubygems.org/gems/websocket-driver/versions/0.7.3 2010-2020 Copyright 2010-2020 James Coglan https://github.com/faye/websocket- driver-ruby James Coglan Apache 2.0 websocket-extensions-0.1.5.gem https://rubygems.org/gems/websocket-extensions/versions/0.1.5 2014-2020 Copyright 2014-2020 James Coglan https://github.com/faye/websocket-extensions-ruby James Coglan Apache 2.0 ws-commons-util-1.0.2.jar "This is a small collection of utility classes, that allow high performance XML processing based on SAX. Basically, it is assumed, that you are using an JAXP 1.1 compliant XML parser and nothing else. In particular, no dependency on the javax.xml.transform package is introduced." https://repo.maven.apache.org/maven2/org/apache/ws/commons/util/ws- commons-util/1.0.2/ws-commons-util-1.0.2.pom http://www.apache.org/ Apache Software Foundation BSD 2 commonmark-0.15.2.jar Core of commonmark-java (implementation of CommonMark for parsing markdown and rendering to HTML) http://repo.jfrog.org/artifactory/third-party- releases/com/atlassian/commonmark/commonmark/0.15.2/commonmark-0.15.2.pom 2015-2016 Copyright 2015-2016 Atlassian Pty Ltd https://www.atlassian.com/ Atlassian BSD 2 csv-3.0.9.gem The CSV library provides a complete interface to CSV files and data. It offers tools to enable you to read and write to and from Strings or IO objects, as needed. https://rubygems.org/gems/csv/versions/3.0.9 "2017 Copyright 2017 Olivier Lacan 2018 Copyright 2018 Kouhei Sutou 2007-2017 Copyright 2007- 2017 Yukihiro Matsumoto 2005-2016 Copyright 2005-2016 James Edward Gray II 2018 Copyright 2018 Tomohiro Ogoke 2017 Copyright 2017 Marcus Stollsteimer 2017 Copyright 2017 SHIBATA Hiroshi 2018 Copyright 2018 Vladislav 2018 Copyright 2018 Mitsutaka Mimura 2017-2018 Copyright 2017- 2018 Steven Daniels 2017 Copyright 2017 pavel 2017 Copyright 2017 Espartaco Palma" https://github.com/ruby/csv James Edward Gray II, Kouhei Sutou BSD 2 domain_name-0.5.20190701.gem* "This is a Domain Name manipulation library for Ruby. It can also be used for cookie domain validation based on the Public Suffix List." https://rubygems.org/gems/domain_name/versions/0.5.20190701 "2011-2017 Copyright 2011-2017 Akinori MUSHA 2000-2002 Copyright 2000-2002 Verisign Inc., All rights reserved" https://github.com/knu/ruby-domain_name Akinori MUSHA BSD 2 jline-2.14.6.jar Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/ 2002-2016 Copyright 2002-2016 the original author or authors http://nexus.sonatype.org/oss-repository-hosting.html/jline BSD 2 rubyzip-1.3.0.gem https://rubygems.org/gems/rubyzip/versions/1.3.0 http://github.com/rubyzip/rubyzip Alexander Simonov BSD 2 unf-0.1.4-java.gem "This is a wrapper library to bring Unicode Normalization Form support to Ruby/JRuby. " https://rubygems.org/gems/unf/versions/0.1.4 "2011-2012 Copyright 2011-2012 Akinori MUSHA 2011-2012 Copyright 2011-2012 2013 Akinori MUSHA" https://github.com/knu/ruby-unf Akinori MUSHA BSD 3 d3-3.2.8.min.js A JavaScript visualization library for HTML and SVG. https://cdnjs.com/libraries/d3/3.2.8 https://d3js.org BSD 3 domain_name-0.5.20190701.gem* "This is a Domain Name manipulation library for Ruby. It can also be used for cookie domain validation based on the Public Suffix List." https://rubygems.org/gems/domain_name/versions/0.5.20190701 "2011-2017 Copyright 2011-2017 Akinori MUSHA 2000-2002 Copyright 2000-2002 Verisign Inc., All rights reserved" https://github.com/knu/ruby-domain_name Akinori MUSHA BSD 3 ffi-1.13.1-java.gem Ruby FFI library https://rubygems.org/gems/ffi/versions/1.13.1 "2008-2013 Copyright 2008-2013 Ruby FFI project contributors 2008-2012 Copyright 2008-2012 Ruby-FFI contributors 2008-2016 Copyright 2008-2016 Ruby FFI project contributors 1996-2011 Copyright 1996-2011 Anthony Green, Red Hat, Inc and others" https://github.com/ffi/ffi/wiki Wayne Meissner BSD 3 jsch-0.1.54.jar jsch-0.1.54.jar http://www.jcraft.com/jsch/ 2015 Atsuhiko Yamanaka, JCraft,Inc. BSD 3 warning-3.0.0.tgz A mirror of Facebook's Warning https://www.npmjs.org/package/warning 2013-2015 Copyright 2013- 2015 Facebook, Inc https://github.com/BerkeleyTrue/warning bzip2 bzip2.exe https://sourceforge.net/p/bzip2/bzip2/ci/master/tree/LICENSE CDDL 1.1 jersey-bundle-1.19.1.jar "A bundle containing code of all jar-based modules that provide JAX-RS and Jersey-related features.