Profile Service Version 2.0.0 Third-Party Disclosure Document Europe: Asia: Bosch.IO GmbH Bosch.IO Ullsteinstrasse 128 c/o Robert Bosch (SEA) Pte Ltd 12109 Berlin 11 Bishan Street 21 Germany Singapore 573943 Tel. +49 30 726112-0 Tel. +65 6571 2220 [email protected] [email protected] www.bosch.io www.bosch.io Third-Party Disclosure Document Copyright © Bosch.IO GmbH © 2021 Bosch.IO GmbH. All rights reserved, also regarding any disposal, exploitation, reproduction, editing, distribution, as well as in the event of applications for industrial property rights. Third-Party Disclosure Document Table of Contents 1. Acknowledgments ........................................................................................................ 1 2. Third Party Licenses and Components ..................................................................... 2 A. Apache-2.0 ........................................................................................................................................ 25 B. BSD-3-Clause .................................................................................................................................... 28 C. BSD-UNSPECIFIED ............................................................................................................................ 29 D. CC-BY-2.5 ......................................................................................................................................... 30 E. CC0-1.0 ............................................................................................................................................ 35 F. CDDL-1.1 .......................................................................................................................................... 38 G. EPL-1.0 ............................................................................................................................................ 43 H. EPL-2.0 ............................................................................................................................................ 46 I. GPL-2.0-with-classpath-exception ........................................................................................................... 51 J. MIT .................................................................................................................................................. 56 K. PUBLIC-DOMAIN ............................................................................................................................... 57 © Bosch.IO GmbH iii/58 Chapter 1. Acknowledgments Chapter 1. Acknowledgments The IQ Analyzer utilizes third-party software components. This disclosure document lists these software components and their licenses. © Bosch.IO GmbH 1/58 Chapter 2. Third Party Licenses and Components Chapter 2. Third Party Licenses and Components This chapter lists all used third-party libraries together with their licenses shipped with the IQ Analyzer: Dependency animal-sniffer-annotations-1.19.jar pkg:maven/org.codehaus.mojo/[email protected] Licenses: • MIT Dependency annotations-4.1.1.4.jar pkg:maven/com.google.android/[email protected] Licenses: • Apache-2.0 Dependency api-common-1.10.1.jar pkg:maven/com.google.api/[email protected] Licenses: • BSD-3-Clause • BSD-UNSPECIFIED • BSD-3-Clause Dependency auto-value-annotations-1.7.4.jar pkg:maven/com.google.auto.value/[email protected] Licenses: • Apache-2.0 Dependency aws-java-sdk-core-1.11.924.jar pkg:maven/com.amazonaws/[email protected] Licenses: • Apache-2.0 Dependency aws-java-sdk-dynamodb-1.11.919.jar © Bosch.IO GmbH 2/58 Chapter 2. Third Party Licenses and Components pkg:maven/com.amazonaws/[email protected] Licenses: • Apache-2.0 Dependency aws-java-sdk-kms-1.11.919.jar pkg:maven/com.amazonaws/[email protected] Licenses: • Apache-2.0 Dependency aws-java-sdk-s3-1.11.919.jar pkg:maven/com.amazonaws/[email protected] Licenses: • Apache-2.0 Dependency aws-java-sdk-sns-1.11.924.jar pkg:maven/com.amazonaws/[email protected] Licenses: • Apache-2.0 Dependency aws-java-sdk-sqs-1.11.924.jar pkg:maven/com.amazonaws/[email protected] Licenses: • Apache-2.0 Dependency byte-buddy-1.10.18.jar pkg:maven/net.bytebuddy/[email protected] Licenses: • BSD-3-Clause • Apache-2.0 Dependency cdi-api-1.2.jar pkg:maven/javax.enterprise/[email protected] © Bosch.IO GmbH 3/58 Chapter 2. Third Party Licenses and Components Licenses: • Apache-2.0 Dependency checker-compat-qual-2.5.5.jar pkg:maven/org.checkerframework/[email protected] Licenses: • MIT • GPL-2.0-with-classpath-exception Dependency classgraph-4.8.83.jar pkg:maven/io.github.classgraph/[email protected] Licenses: • MIT Dependency classmate-1.5.1.jar pkg:maven/com.fasterxml/[email protected] Licenses: • Apache-2.0 Dependency commons-codec-1.13.jar pkg:maven/commons-codec/[email protected] Licenses: • Apache-2.0 Dependency commons-lang3-3.9.jar pkg:maven/org.apache.commons/[email protected] Licenses: • Apache-2.0 Dependency commons-logging-1.2.jar pkg:maven/commons-logging/[email protected] Licenses: © Bosch.IO GmbH 4/58 Chapter 2. Third Party Licenses and Components • Apache-2.0 Dependency conscrypt-openjdk-uber-2.5.1.jar pkg:maven/org.conscrypt/[email protected] Licenses: • Apache-2.0 Dependency converter-jackson-2.9.0.jar pkg:maven/com.squareup.retrofit2/[email protected] Licenses: • Apache-2.0 Dependency error_prone_annotations-2.4.0.jar pkg:maven/com.google.errorprone/[email protected] Licenses: • Apache-2.0 Dependency failureaccess-1.0.1.jar pkg:maven/com.google.guava/[email protected] Licenses: • Apache-2.0 Dependency gax-1.60.0.jar pkg:maven/com.google.api/[email protected] Licenses: • BSD-3-Clause • BSD-UNSPECIFIED • BSD-3-Clause Dependency gax-grpc-1.60.0.jar pkg:maven/com.google.api/[email protected] Licenses: © Bosch.IO GmbH 5/58 Chapter 2. Third Party Licenses and Components • BSD-3-Clause • BSD-UNSPECIFIED • BSD-3-Clause Dependency google-api-client-1.31.0.jar pkg:maven/com.google.api-client/[email protected] Licenses: • BSD-3-Clause • Apache-2.0 Dependency google-api-services-androidpublisher-v3-rev20201022-1.30.10.jar pkg:maven/com.google.apis/[email protected] Licenses: • Apache-2.0 Dependency google-auth-library-credentials-0.22.0.jar pkg:maven/com.google.auth/[email protected] Licenses: • BSD-3-Clause Dependency google-auth-library-oauth2-http-0.22.0.jar pkg:maven/com.google.auth/[email protected] Licenses: • BSD-3-Clause Dependency google-cloud-pubsub-1.108.7.jar pkg:maven/com.google.cloud/[email protected] Licenses: • Apache-2.0 Dependency google-http-client-1.38.0.jar © Bosch.IO GmbH 6/58 Chapter 2. Third Party Licenses and Components pkg:maven/com.google.http-client/[email protected] Licenses: • Apache-2.0 Dependency google-http-client-apache-v2-1.38.0.jar pkg:maven/com.google.http-client/[email protected] Licenses: • Apache-2.0 Dependency google-http-client-jackson2-1.38.0.jar pkg:maven/com.google.http-client/[email protected] Licenses: • Apache-2.0 Dependency google-oauth-client-1.31.2.jar pkg:maven/com.google.oauth-client/[email protected] Licenses: • Apache-2.0 Dependency grpc-alts-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-api-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-auth-1.33.1.jar pkg:maven/io.grpc/[email protected] © Bosch.IO GmbH 7/58 Chapter 2. Third Party Licenses and Components Licenses: • Apache-2.0 Dependency grpc-context-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-core-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-grpclb-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-netty-shaded-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-protobuf-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency grpc-protobuf-lite-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: © Bosch.IO GmbH 8/58 Chapter 2. Third Party Licenses and Components • Apache-2.0 Dependency grpc-stub-1.33.1.jar pkg:maven/io.grpc/[email protected] Licenses: • Apache-2.0 Dependency gson-2.8.6.jar pkg:maven/com.google.code.gson/[email protected] Licenses: • Apache-2.0 Dependency guava-30.0-android.jar pkg:maven/com.google.guava/[email protected] Licenses: • Apache-2.0 • PUBLIC-DOMAIN Dependency HdrHistogram-2.1.11.jar pkg:maven/org.hdrhistogram/[email protected] Licenses: • CC0-1.0 Dependency hibernate-validator-6.0.21.Final.jar pkg:maven/org.hibernate.validator/[email protected] Licenses: • Apache-2.0 • PUBLIC-DOMAIN Dependency httpclient-4.5.13.jar © Bosch.IO GmbH 9/58 Chapter 2. Third Party Licenses and Components pkg:maven/org.apache.httpcomponents/[email protected] Licenses: • Apache-2.0 Dependency httpcore-4.4.14.jar pkg:maven/org.apache.httpcomponents/[email protected] Licenses: • Apache-2.0 Dependency ion-java-1.0.2.jar pkg:maven/software.amazon.ion/[email protected] Licenses: • Apache-2.0 Dependency j2objc-annotations-1.3.jar pkg:maven/com.google.j2objc/[email protected] Licenses: • Apache-2.0 Dependency jackson-annotations-2.10.5.jar pkg:maven/com.fasterxml.jackson.core/[email protected] Licenses: • Apache-2.0 Dependency jackson-core-2.10.5.jar pkg:maven/com.fasterxml.jackson.core/[email protected] Licenses: • Apache-2.0