go-licenses.yaml

licenses:
  types:
    overrides:
    - spdxId: blessing
      type: unencumbered
module:
  go:
    version: master
  overrides:
  - name: github.com/kubeflow/pipelines
    excludePaths:
    # the following are not used to build binaries
    - manifests
    - components
    - frontend
    - samples
    - backend/api/python_http_client
    - third_party/argo
    - third_party/minio
    - third_party/metadata_envoy
    # collected third party licenses
    - third_party/license.txt
    - third_party/NOTICES
    - third_party/ml-metadata # is a separate go module
    - backend/build # ignore built binaries
    - v2 # v2 is a separate sub-module
  - name: github.com/kubeflow/pipelines/api
    skip: true # this is a local module in the same project
  - name: github.com/beorn7/perks
    excludePaths:
    # README.md contains duplicate license info as LICENSE
    - README.md
  - name: github.com/docker/spdystream
    excludePaths:
    - LICENSE.docs # documentations use this license, does not affect us
  - name: github.com/ghodss/yaml
    version: v1.0.1-0.20190212211648-25d852aebe32
    license:
      path: LICENSE
      spdxId: MIT / BSD-3-Clause
  - name: github.com/mattn/go-sqlite3
    version: v1.9.0
    license:
      path: LICENSE
      spdxId: MIT
    subModules:
    - path: .
      license:
        path: sqlite3-binding.h
        spdxId: blessing
        lineStart: 2
        lineEnd: 11
  - name: github.com/matttproud/golang_protobuf_extensions
    excludePaths:
    - testdata
  - name: github.com/prometheus/common
    version: v0.26.0
    license:
      path: LICENSE
      spdxId: Apache-2.0
    subModules:
    - path: internal/bitbucket.org/ww/goautoneg
      license:
        path: README.txt
        spdxId: BSD-3-Clause
  - name: go.mongodb.org/mongo-driver
    version: v1.4.4
    excludePaths:
    - THIRD-PARTY-NOTICES # third party dependencies already included by go modules
    license:
      path: LICENSE
      spdxId: Apache-2.0
    subModules:
    - path: .
      license:
        path: THIRD-PARTY-NOTICES
        spdxId: BSD-2-Clause
        lineStart: 1
        lineEnd: 29
    - path: .
      license:
        path: THIRD-PARTY-NOTICES
        spdxId: BSD-3-Clause
        lineStart: 31
        lineEnd: 61
  - name: gopkg.in/jcmturner/gokrb5.v5
    excludePaths:
    - testenv
  - name: gopkg.in/yaml.v3
    version: v3.0.0-20210107192922-496545a6307b
    # There are other files with license headers,
    # but they are all included in the root LICENSE.
    license:
      path: LICENSE
      spdxId: MIT
  - name: k8s.io/kubernetes
    excludePaths:
    # Godeps include auto-collected third party license files, but
    # we already get them via go modules, so we can ignore them.
    - Godeps/LICENSES
    # Staging modules are published as separate modules in k8s.io, not used here
    - staging
    # We do not use UI code here.
    - third_party/swagger-ui/lib
  - name: cloud.google.com/go
    version: v0.81.0
    license:
      path: LICENSE
      spdxId: Apache-2.0
    subModules:
    - path: cmd/go-cloud-debug-agent/internal/debug/elf
      license:
        path: elf.go
        spdxId: BSD-2-Clause
        lineStart: 1
        lineEnd: 43
    - path: third_party/pkgsite
      license:
        path: LICENSE
        spdxId: BSD-3-Clause
  - name: cloud.google.com/go/storage
    version: v1.12.0
    license:
      path: LICENSE
      url: https://github.com/googleapis/google-cloud-go/blob/storage/v1.12.0/LICENSE
      spdxId: Apache-2.0
  - name: cloud.google.com/go/compute
    version: v1.5.0
    license:
      path: LICENSE
      url: https://github.com/googleapis/google-cloud-go/blob/compute/v1.5.0/LICENSE
      spdxId: Apache-2.0
  - name: github.com/jmespath/go-jmespath
    version: v0.4.0
    license: # non-standard license file
      path: LICENSE
      spdxId: Apache-2.0
  - name: github.com/aws/aws-sdk-go
    version: v1.36.1
    license:
      path: LICENSE.txt
      spdxId: Apache-2.0
    subModules:
    - path: internal/sync/singleflight
      license:
        path: LICENSE
        spdxId: BSD-3-Clause
  - name: github.com/davecgh/go-spew
    version: v1.1.1
    license:
      path: LICENSE
      spdxId: ISC
  - name: github.com/googleapis/gax-go/v2
    version: v2.0.5
    license:
      path: LICENSE
      spdxId: BSD-3-Clause
  - name: golang.org/x/net
    excludePaths:
    - html/testdata
  - name: github.com/gogo/protobuf
    version: v1.3.2
    license:
      # All files have either BSD-3-Clause or BSD-2-Clause licenses with manual
      # inspection.
      path: LICENSE
      spdxId: BSD-3-Clause / BSD-2-Clause
  - name: google.golang.org/protobuf
    version: v1.27.1
    license:
      path: LICENSE
      spdxId: BSD-3-Clause
  - name: gopkg.in/yaml.v2
    version: v2.4.0
    license:
      path: LICENSE
      # gopkg.in/yaml.v2 is port of a MIT licensed library
      spdxId: Apache-2.0 / MIT
  - name: go.opencensus.io
    version: v0.22.5
    license:
      path: LICENSE
      url: https://github.com/census-instrumentation/opencensus-go/blob/v0.22.5/LICENSE
      spdxId: Apache-2.0