Product Name: Trillium Quality - trillium_quality - trillium_discovery - Latest

Product contains third party and open source disclosures: Yes

Open source software included is as follows:

Apache Tomcat

• Version: 9.0.64
• Usage: open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://tomcat.apache.org/

Apache Http Components – Http Client

• Version: 4.5.13
• Usage: It is a set of low-level, open-source Java components that focus on the fundamentals of client-server communication. These components provide an efficient and flexible foundation for building custom HTTP-based applications and services.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient

Apache Commons - CSV

• Version: 1.5
• Usage: It reads and writes files in variations of the Comma Separated Value (CSV) format.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.commons/commons-csv

Apache Commons - Compress

• Version: 1.21
• Usage: It defines an API for working with compression and archive formats.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.commons/commons-compress

Apache Http Components – Http Core

• Version: 4.4.15
• Usage: It is a set of low-level HTTP transport components that can be used to build custom client and server-side HTTP services with a minimal footprint.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore

Apache XmlBeans

• Version: 5.0.3
• Usage: It is to access XML instance data with strongly typed Java classes.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.xmlbeans/xmlbeans

Apache Log4j Api

• Version: 2.17.2
• Usage: It provides the interface that applications should code to and provides the adapter components required for implementers to create a logging implementation.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api

Apache Log4j Core

• Version: 2.17.2
• Usage: Apache Log4j is a versatile, industrial-grade Java logging framework composed of an API, its implementation, and components to assist the deployment for various use cases.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core

Apache Axis2

• Version: 1.8.1
• Usage: It consists of a Java and a C++ implementation of the SOAP server, and various utilities and APIs for generating and deploying Web service applications. Using Apache Axis, developers can create interoperable, distributed computing applications.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://github.com/apache/axis-axis2-java-core

Commons CLI

• Version: 1.5.0
• Usage: The Apache Commons CLI library provides an API for parsing command line options passed to programs.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/commons-cli/commons-cli

Commons IO

• Version: 2.11.0
• Usage: It includes a list of useful file filters. These can come in handy when a developer wants to narrow down to a specific desired list of files from a heterogeneous list of files.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/commons-io/commons-io

Commons Codec

• Version: 1.15
• Usage: The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/commons-codec/commons-codec

Commons File Upload

• Version: 1.4
• Usage: The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/commons-fileupload/commons-fileupload

Commons Logging

• Version: 1.2
• Usage: A programming model for logging and for other toolkits.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/commons-logging/commons-logging

gJakarta Json

• Version: 2.1.0
• Usage: It provides portable APIs to parse, generate, transform, and query JSON using the streaming API or the object model API.
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/jakarta.json/jakarta.json-api

Jakarta Mail

• Version: 2.1.0
• Usage: To send and receive email via SMTP, POP3 and IMAP.
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/jakarta.mail/jakarta.mail-api

Glassfish Jersey Containers

• Version: 2.37
• Usage: It is an open-source framework for developing RESTful Web Services in Java.
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/org.glassfish.jersey.containers/jersey-container-servlet-core

Glassfish Jersey Inject

• Version: 2.37
• Usage: It is an open-source framework for developing RESTful Web Services in Java
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/org.glassfish.jersey.inject/jersey-hk2

Glassfish – Javax Json

• Version: 1.1
• Usage: It provides an object model API to process JSON.
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/org.glassfish/javax.json

Glassfish – Jakarta Json

• Version: 1.1
• Usage: It provides an object model API to process JSON.
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/org.glassfish/jakarta.json

Glassfish web

• Version: 1.2.6
• Usage: It is used for building and deploying Java Platform, Enterprise Edition (Java EE) applications and web services.
• Licensed by: Licensed under a dual license - EPL 2.0 and GPL 2.0
• Source code URL: https://mvnrepository.com/artifact/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api

Antlr

• Version: 2.7.7
• Usage: It is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
• Licensed by: It is a free software published under a three-clause BSD License.
• Source code URL: https://mvnrepository.com/artifact/antlr/antlr

Junit

• Version: 4.13.2
• Usage: It is a unit testing open-source framework for the Java programming language.
• Licensed by: It is licensed under eclipse public license 2.0. License copy can be found on: https://junit.org/junit4/license.html
• Source code URL: https://mvnrepository.com/artifact/junit/junit

WSDL4j

• Version: 1.6.3
• Usage: It allows the creation, representation, and manipulation of WSDL documents.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/wsdl4j/wsdl4j

Joda-Time

• Version: 2.9.9
• Usage: It offers an intuitive API for processing date and time and also addresses the design issues that existed in the Java Date/Time API.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/joda-time/joda-time

Taglibs

• Version: 1.2.5
• Usage: It declares that your JSP page uses a set of custom tags, identifies the location of the library, and provides a means for identifying the custom tags in your JSP page.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.apache.taglibs/taglibs-standard-impl

Json-simple

• Version: 1.1.1
• Usage: It is used for parsing JSON data as well as writing JSON to file.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/com.googlecode.json-simple/json-simple

Guava

• Version: 31.1 - JRE
• Usage: It provides a few extremely useful string utilities like splitting, joining, padding, and more.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/com.google.guava/guava

Woodstox

• Version: 4.4.1
• Usage: It is used for processing high volume XML.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/org.codehaus.woodstox/woodstox-core-asl

FasterXML Jackson

• Version: 2.13.2
• Usage: It allows for reading JSON content into Java Objects (POJOs) and JSON Trees ( JsonNode ), as well as writing Java Objects and trees as JSON.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core

Javax - Jaxb

• Version: 2.2.7
• Usage: It provides a fast and convenient way to marshal (write) Java objects into XML and unmarshal (read) XML into objects.
• Licensed by: JAXB is licensed under a dual license - CDDL 1.1 and GPL 2.0 with Class-path Exception. That means you can choose which one of the two suits your needs better and use it under those terms.
• Source code URL: https://mvnrepository.com/artifact/javax.xml.bind/jaxb-api

Javax - Jaxrpc

• Version: 1.1
• Usage: It provides core APIs for developing and deploying web services on a Java platform.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0.
• Source code URL: https://mvnrepository.com/artifact/javax.xml/jaxrpc-api

Javax – Servlet JSTL

• Version: 1.2
• Usage: It allows developers to write custom iteration tags by implementing the LoopTag interface.
• Licensed by: CDDLGPL 2.0
• Source code URL: https://mvnrepository.com/artifact/javax.servlet/jstl

Javax – Servlet API

• Version: 4.0.1
• Usage: It contains several classes and interfaces that describe and define the contracts between a servlet class and the runtime environment provided for an instance of such a class by a conforming servlet container.
• Licensed by: : Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/javax.servlet/javax.servlet-api

Javax – ws rs API

• Version: 2.1
• Usage: It provides portable APIs for developing, exposing and accessing Web applications.
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://mvnrepository.com/artifact/javax.ws.rs/javax.ws.rs-api

cURL

• Version: 8.8.0 – Windows
• Version: 8.8.0 – RedHat 8
• Usage: a command line tool for getting or sending files using URL syntax
• Licensed by: Copyright © 1996–2018. MIT/X derivative license
• Source code URL: https://github.com/curl/curl

ICU

• Versions: 74.2
• Usage: provides Unicode and Globalization support for software applications Licensed by: ICU is released under a nonrestrictive open source license copyright © 1991-2022 that is suitable for use with both commercial software and with other open source or free software http://www.unicode.org/copyright.html#Licensehttps://github.com/unicode-org/icu/blob/main/icu4c/LICENSE
• Source code URL: https://github.com/unicode-org/icu

mbed TLS

• Version: 3.6.0
• Usage: library that makes it easy for developers to include cryptographic and SSL/TLS capabilities in their products, facilitating this functionality with a minimal coding footprint
• Licensed by: Apache Foundation copyright © 1999 - 2018 Apache License Version 2.0
• Source code URL: https://tomcat.apache.org/

Nghttp2

• Version: 1.59.0 – Windows
• Usage: HTTP/2 C Library and tools
• Licensed by: MIT License Copyright (c) 2012, 2014, 2015, 2016 Tatsuhiro Tsujikawa Copyright (c) 2012, 2014, 2015, 2016 nghttp2 contributors
• Source code URL: https://github.com/nghttp2/nghttp2/releases/tag/v1.40.0

Psl

• Version: 0.21.0 
• Usage: provides regular expression support
• Licensed by: licensed under the MIT License, Copyright (C) 2014-2015 Tim Rühsen
• Source code URL: https://github.com/rockdaboot/libpsl/releases/tag/0.2.4

PCRE2

• Version: 10.42
• Usage: provides regular expression support
• Licensed by: Philip Hazel and copyright © 1997-2001 by the University of Cambridge, England. The PCRE library package is licensed under PCRE’s BSD license. https://pcre.org/licence.txt
• Source code URL: https://github.com/PCRE2Project/pcre2/releases

Pthreads – Windows only

• Version: 3.0.0
• Usage: Windows Threading Library
• Licensed by: Copyright © 1999,2003. GNU Lesser General Public License v2.1. Only a Dynamic library is being delivered with the product. This type of use of the LGPL makes in non-reciprocal.
• Source code URL: https://github.com/G-P-S/pthreads-win32-2-9-1

RapidJSON

• Version: 1.1.0
• Usage: JSON parser and generator for C++
• Licensed by: MIT License Copyright © 2015 (binary), Copyright (C) 2015 THL A29 Limited, a Tencent company, and Milo Yip (source code)
• Source code URL: https://github.com/Tencent/rapidjson/releases/tag/v1.1.0

Xalan-C++

• Version: 1.11.0 – Windows
• Version: 1.12.0 – RedHat 8
• Usage: transforms XML documents into HTML, text, or other XML document types
• Licensed by: Apache Foundation copyright © January 2004 Apache License Version 2.0 https://www.apache.org/licenses/LICENSE-2.0.txt
• Source code URL: https://apache.github.io/xalan-c/download.html

Xerces-C++

• Version: 3.14 – Windows
• Version: 3.2.5 – RedHat 8
• Usage: XML parser written in a portable subset of C++, making it easy to give an application the ability to read and write XML data
• Licensed by: Apache Foundation copyright © January 2004 Apache License Version 2.0 https://www.apache.org/licenses/LICENSE-2.0.txt
• Source code URL: https://xerces.apache.org/xerces-c/download.cgi

Zlib

• Version: 1.3
• Usage: general purpose library for data compression and decompression
• Licensed by: Zlib library, Copyright© 1995-2017 Jean-loup Gailly and Mark Adler. The text of the license can be found at https://www.zlib.net/zlib_license.html
• Source Code URL: https://github.com/madler/zlib