Golang Utilities · Third-party licence and IP report

Download this report

Choose a format for further analysis or sharing.

Download CSV Download JSON Download text

Summary

Compliant

The project is licensed under the Apache-2.0 licence.

The project and all assessed dependencies meet the configured licence policy, including any documented manual reviews.

Configured licence policy

Accepted third-party licences:

Apache-2.0
BSD*
CC-BY-*
JSON
MIT
Python-2.0
PSF-2.0
MPL-2.0

An asterisk includes matching licence identifiers. Documented manual reviews may approve exceptions.

Packages reviewed97The project and each discovered dependency included in this report.

Missing dependencies0Dependencies expected but not found in the audited environment.

Unknown licences4Packages without a usable licence declaration, including those manually reviewed.

Undocumented exemptions0Manual licence exceptions without a recorded reason.

Audit gaps

Audit gaps highlight missing or uncertain dependency licence information that needs attention. An unknown licence can still appear here after a documented manual review, even when the overall policy status is compliant.

Unknown licences (including manually reviewed)

github.com/cyphar/filepath-securejoin
github.com/emirpasic/gods
github.com/klauspost/compress
sigs.k8s.io/yaml

Dependency licence assessment

Directional screening against the project's declared licence. Results indicate potential risks, not legal conclusions. The configured allowlist compliance check remains separate.

ALLOW91No obvious issue under the screening rules; licence notices and conditions still apply.

REVIEW0Needs human review of obligations that may depend on linking, modification or distribution.

MANUALLY_REVIEWED5An automatic REVIEW has a documented human assessment; see the dependency details.

DENY0A specific rule or project policy identifies a conflict or prohibition.

UNKNOWN0Missing licence details or no reliable assessment rule; a package may still declare a licence.

Dependencies needing attention

No dependencies need further licence assessment.

Dependency summary

Choose a package to jump to its licence and evidence in the detailed results.

Project: Golang Utilities

Browse 96 dependencies

dario.cat/mergoBSD-3-Clause
github.com/asaskevich/govalidatorMIT
github.com/avast/retry-go/v4MIT
github.com/bmatcuk/doublestar/v3MIT
github.com/bombsimon/logrusr/v4MIT
github.com/cloudflare/circlBSD-3-Clause
github.com/cyphar/filepath-securejoinUnknown
github.com/deckarep/golang-set/v2MIT
github.com/DeRuina/timberjackMIT
github.com/djherbis/timesMIT
github.com/dolmen-go/contextioApache-2.0
github.com/emirpasic/godsUnknown
github.com/evanphx/hclogrMIT
github.com/fatih/colorMIT
github.com/fsnotify/fsnotifyBSD-3-Clause
github.com/git-pkgs/spdxMIT
github.com/github/go-spdx/v2/spdxexpMIT
github.com/go-faker/faker/v4MIT
github.com/go-git/gcfgBSD-3-Clause
github.com/go-git/go-billy/v5Apache-2.0
github.com/go-git/go-git/v5Apache-2.0
github.com/go-http-utils/headersMIT
github.com/go-logr/logrApache-2.0
github.com/go-logr/stdrApache-2.0
github.com/go-logr/zaprApache-2.0
github.com/go-ozzo/ozzo-validation/v4MIT
github.com/go-viper/mapstructure/v2MIT
github.com/godbus/dbus/v5BSD-2-Clause
github.com/gofrs/uuid/v5MIT
github.com/gogs/chardetMIT
github.com/golang/groupcache/lruApache-2.0
github.com/hashicorp/errwrapMPL-2.0
github.com/hashicorp/go-cleanhttpMPL-2.0
github.com/hashicorp/go-hclogMIT
github.com/hashicorp/go-multierrorMPL-2.0
github.com/hashicorp/go-retryablehttpMPL-2.0
github.com/jbenet/go-context/ioMIT
github.com/joho/godotenvMIT
github.com/josharian/internMIT
github.com/kevinburke/ssh_configMIT
github.com/klauspost/compressUnknown
github.com/klauspost/compress/internal/snaprefBSD-3-Clause
github.com/klauspost/compress/zstd/internal/xxhashMIT
github.com/klauspost/cpuid/v2MIT
github.com/mailru/easyjsonMIT
github.com/mattn/go-colorableMIT
github.com/mattn/go-isattyMIT
github.com/mitchellh/go-homedirMIT
github.com/OneOfOne/xxhashApache-2.0
github.com/pelletier/go-toml/v2MIT
github.com/perimeterx/marshmallowMIT
github.com/petermattis/goidApache-2.0
github.com/pjbgf/sha1cdApache-2.0
github.com/pquerna/ffjsonApache-2.0
github.com/ProtonMail/go-cryptoBSD-3-Clause
github.com/rifflock/lfshookMIT
github.com/rs/zerologMIT
github.com/sagikazarmark/locaferoMIT
github.com/santhosh-tekuri/jsonschema/v6Apache-2.0
github.com/sasha-s/go-deadlockApache-2.0
github.com/sergi/go-diff/diffmatchpatchMIT
github.com/shirou/gopsutil/v4BSD-3-Clause
github.com/sirupsen/logrusMIT
github.com/skeema/knownhostsApache-2.0
github.com/sourcegraph/concMIT
github.com/spaolacci/murmur3BSD-3-Clause
github.com/spf13/aferoApache-2.0
github.com/spf13/castMIT
github.com/spf13/pflagBSD-3-Clause
github.com/spf13/viperMIT
github.com/stretchr/testifyMIT
github.com/stretchr/testify/internal/difflibBSD-3-Clause
github.com/stretchr/testify/internal/spewISC
github.com/sttk/stringcaseMIT
github.com/subosito/gotenvMIT
github.com/tklauser/go-sysconfBSD-3-Clause
github.com/tklauser/numcpusApache-2.0
github.com/xanzy/ssh-agentApache-2.0
github.com/zalando/go-keyringMIT
go.mongodb.org/mongo-driverApache-2.0
go.uber.org/atomicMIT
go.uber.org/mock/gomockApache-2.0
go.uber.org/multierrMIT
go.uber.org/zapMIT
go.yaml.in/yaml/v2Apache-2.0
go.yaml.in/yaml/v3MIT
golang.org/x/cryptoBSD-3-Clause
golang.org/x/exp/mapsBSD-3-Clause
golang.org/x/mod/semverBSD-3-Clause
golang.org/x/netBSD-3-Clause
golang.org/x/oauth2BSD-3-Clause
golang.org/x/sync/errgroupBSD-3-Clause
golang.org/x/sysBSD-3-Clause
golang.org/x/textBSD-3-Clause
gopkg.in/warnings.v0BSD-2-Clause
sigs.k8s.io/yamlUnknown

Package licences

Review the project's declared licence and the licences of its dependencies. Open the evidence panels to see original declarations and packaged notices.

Licence identification, configured-policy compliance and dependency compatibility are separate steps. A manual licence record can approve a package for the configured policy and, when it contains a valid SPDX expression, supply an assessment licence without changing what discovery found.

Licence declarations and compliance by package
Status	Assessment	Package	Version	Scope	Reference	Licence	Source	Packaged evidence	Details
Compliant	ALLOW	dario.cat/mergo	`v1.0.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/imdario/mergo/blob/v1.0.0/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/asaskevich/govalidator	`v0.0.0-20200108200545-475eaeb16496`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/asaskevich/govalidator/blob/475eaeb16496/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/avast/retry-go/v4	`v4.7.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/avast/retry-go/blob/v4.7.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/bmatcuk/doublestar/v3	`v3.0.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/bmatcuk/doublestar/blob/v3.0.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/bombsimon/logrusr/v4	`v4.2.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/bombsimon/logrusr/blob/v4.2.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/cloudflare/circl	`v1.6.3`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/cloudflare/circl/blob/v1.6.3/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Reviewed	MANUALLY_REVIEWED	github.com/cyphar/filepath-securejoin	`v0.6.1`	Dependency	unknown	Unknown	`unknown`	Licence candidates (review required) BSD-3-Clause; MPL-2.0 Original declaration unknown Licence: https://github.com/cyphar/filepath-securejoin/blob/v0.6.1/COPYING.md View licence file Licence: https://github.com/cyphar/filepath-securejoin/blob/v0.6.1/COPYING.md View licence file	Licence identification Discovered licence: `Unknown`. Manually verified licence for assessment: `BSD-3-Clause AND MPL-2.0`. Configured licence policy Automatic policy check: Does not meet the configured licence policy. Manual policy review: BSD-3-Clause AND MPL-2.0 Dependency licence compatibility Assessment: REVIEW — Assessed using manually verified BSD-3-Clause AND MPL-2.0 because the discovered licence was unknown. All AND obligations apply: BSD-3-Clause: A permissive dependency generally permits redistribution; retain its notices and conditions.; MPL-2.0: Weak copyleft obligations depend on modification, linking and how the work is distributed. Manual compatibility review: Reviewed the MPL-2.0 obligations for this unmodified dependency and will retain the required notices. Compared with project licence `Apache-2.0`. Rule: `expression-and` (built-in); choice: `BSD-3-Clause AND MPL-2.0`.
Compliant	ALLOW	github.com/deckarep/golang-set/v2	`v2.9.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/deckarep/golang-set/blob/v2.9.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/DeRuina/timberjack	`v1.4.8`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/DeRuina/timberjack/blob/v1.4.8/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/djherbis/times	`v1.6.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/djherbis/times/blob/v1.6.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/dolmen-go/contextio	`v1.0.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/dolmen-go/contextio/blob/v1.0.0/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Reviewed	ALLOW	github.com/emirpasic/gods	`v1.18.1`	Dependency	unknown	Unknown	`unknown`	Licence candidates (review required) BSD-2-Clause; ISC Original declaration unknown Licence: https://github.com/emirpasic/gods/blob/v1.18.1/LICENSE View licence file Licence: https://github.com/emirpasic/gods/blob/v1.18.1/LICENSE View licence file	Licence identification Discovered licence: `Unknown`. Manually verified licence for assessment: `BSD-2-Clause AND ISC`. Configured licence policy Automatic policy check: Does not meet the configured licence policy. Manual policy review: BSD-2-Clause AND ISC Dependency licence compatibility Assessment: ALLOW — Assessed using manually verified BSD-2-Clause AND ISC because the discovered licence was unknown. All AND obligations apply: BSD-2-Clause: A permissive dependency generally permits redistribution; retain its notices and conditions.; ISC: A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `expression-and` (built-in); choice: `BSD-2-Clause AND ISC`.
Compliant	ALLOW	github.com/evanphx/hclogr	`v0.2.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/evanphx/hclogr/blob/v0.2.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/fatih/color	`v1.16.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/fatih/color/blob/v1.16.0/LICENSE.md View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/fsnotify/fsnotify	`v1.9.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/fsnotify/fsnotify/blob/v1.9.0/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/git-pkgs/spdx	`v0.3.1`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/git-pkgs/spdx/blob/v0.3.1/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/github/go-spdx/v2/spdxexp	`v2.7.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/github/go-spdx/blob/v2.7.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/go-faker/faker/v4	`v4.9.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/go-faker/faker/blob/v4.9.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/go-git/gcfg	`v1.5.1-0.20230307220236-3a3c6141e376`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/go-git/gcfg/blob/3a3c6141e376/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/go-git/go-billy/v5	`v5.9.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/go-git/go-billy/blob/v5.9.0/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/go-git/go-git/v5	`v5.19.1`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/go-git/go-git/blob/v5.19.1/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/go-http-utils/headers	`v0.0.0-20181008091004-fed159eddc2a`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/go-http-utils/headers/blob/fed159eddc2a/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/go-logr/logr	`v1.4.4`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/go-logr/logr/blob/v1.4.4/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/go-logr/stdr	`v1.2.2`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/go-logr/stdr/blob/v1.2.2/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/go-logr/zapr	`v1.3.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/go-logr/zapr/blob/v1.3.0/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/go-ozzo/ozzo-validation/v4	`v4.3.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/go-ozzo/ozzo-validation/blob/v4.3.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/go-viper/mapstructure/v2	`v2.5.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/go-viper/mapstructure/blob/v2.5.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/godbus/dbus/v5	`v5.2.2`	Dependency	View link	BSD-2-Clause	`tool`	Original declaration BSD-2-Clause Licence: https://github.com/godbus/dbus/blob/v5.2.2/LICENSE View licence file	Licence identification Discovered licence: `BSD-2-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-2-Clause`.
Compliant	ALLOW	github.com/gofrs/uuid/v5	`v5.5.1`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/gofrs/uuid/blob/v5.5.1/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/gogs/chardet	`v0.0.0-20211120154057-b7413eaefb8f`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/gogs/chardet/blob/b7413eaefb8f/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/golang/groupcache/lru	`v0.0.0-20241129210726-2c02b8208cf8`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/golang/groupcache/blob/2c02b8208cf8/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	MANUALLY_REVIEWED	github.com/hashicorp/errwrap	`v1.0.0`	Dependency	View link	MPL-2.0	`tool`	Original declaration MPL-2.0 Licence: https://github.com/hashicorp/errwrap/blob/v1.0.0/LICENSE View licence file	Licence identification Discovered licence: `MPL-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: REVIEW — Weak copyleft obligations depend on modification, linking and how the work is distributed. Manual compatibility review: Used indirectly through go-multierror in utils/commonerrors for error wrapping helpers. This is acceptable provided the dependency remains unmodified in distribution artifacts, MPL-2.0 notices and licence text are retained, and any future modifications to MPL-covered files are made available under MPL-2.0. Compared with project licence `Apache-2.0`. Rule: `weak-copyleft-dependency` (built-in); choice: `MPL-2.0`.
Compliant	MANUALLY_REVIEWED	github.com/hashicorp/go-cleanhttp	`v0.5.2`	Dependency	View link	MPL-2.0	`tool`	Original declaration MPL-2.0 Licence: https://github.com/hashicorp/go-cleanhttp/blob/v0.5.2/LICENSE View licence file	Licence identification Discovered licence: `MPL-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: REVIEW — Weak copyleft obligations depend on modification, linking and how the work is distributed. Manual compatibility review: Used directly in utils/http to create isolated pooled HTTP clients and transports. This is acceptable provided the dependency remains unmodified in distribution artifacts, MPL-2.0 notices and licence text are retained, and any future modifications to MPL-covered files are made available under MPL-2.0. Compared with project licence `Apache-2.0`. Rule: `weak-copyleft-dependency` (built-in); choice: `MPL-2.0`.
Compliant	ALLOW	github.com/hashicorp/go-hclog	`v1.6.3`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/hashicorp/go-hclog/blob/v1.6.3/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	MANUALLY_REVIEWED	github.com/hashicorp/go-multierror	`v1.1.1`	Dependency	View link	MPL-2.0	`tool`	Original declaration MPL-2.0 Licence: https://github.com/hashicorp/go-multierror/blob/v1.1.1/LICENSE View licence file	Licence identification Discovered licence: `MPL-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: REVIEW — Weak copyleft obligations depend on modification, linking and how the work is distributed. Manual compatibility review: Used directly in utils/commonerrors to aggregate multiple errors. This is acceptable provided the dependency remains unmodified in distribution artifacts, MPL-2.0 notices and licence text are retained, and any future modifications to MPL-covered files are made available under MPL-2.0. Compared with project licence `Apache-2.0`. Rule: `weak-copyleft-dependency` (built-in); choice: `MPL-2.0`.
Compliant	MANUALLY_REVIEWED	github.com/hashicorp/go-retryablehttp	`v0.7.8`	Dependency	View link	MPL-2.0	`tool`	Original declaration MPL-2.0 Licence: https://github.com/hashicorp/go-retryablehttp/blob/v0.7.8/LICENSE View licence file	Licence identification Discovered licence: `MPL-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: REVIEW — Weak copyleft obligations depend on modification, linking and how the work is distributed. Manual compatibility review: Used directly in utils/http to implement retryable HTTP client behavior and request handling. This is acceptable provided the dependency remains unmodified in distribution artifacts, MPL-2.0 notices and licence text are retained, and any future modifications to MPL-covered files are made available under MPL-2.0. Compared with project licence `Apache-2.0`. Rule: `weak-copyleft-dependency` (built-in); choice: `MPL-2.0`.
Compliant	ALLOW	github.com/jbenet/go-context/io	`v0.0.0-20150711004518-d14ea06fba99`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/jbenet/go-context/blob/d14ea06fba99/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/joho/godotenv	`v1.5.1`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/joho/godotenv/blob/v1.5.1/LICENCE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/josharian/intern	`v1.0.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/josharian/intern/blob/v1.0.0/license.md View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/kevinburke/ssh_config	`v1.2.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/kevinburke/ssh_config/blob/v1.2.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Reviewed	ALLOW	github.com/klauspost/compress	`v1.18.7`	Dependency	unknown	Unknown	`unknown`	Licence candidates (review required) Apache-2.0; BSD-3-Clause; MIT Original declaration unknown Licence: https://github.com/klauspost/compress/blob/v1.18.7/LICENSE View licence file Licence: https://github.com/klauspost/compress/blob/v1.18.7/LICENSE View licence file Licence: https://github.com/klauspost/compress/blob/v1.18.7/LICENSE View licence file	Licence identification Discovered licence: `Unknown`. Manually verified licence for assessment: `Apache-2.0 AND BSD-3-Clause AND MIT`. Configured licence policy Automatic policy check: Does not meet the configured licence policy. Manual policy review: BSD-3-Clause AND Apache-2.0 AND MIT Dependency licence compatibility Assessment: ALLOW — Assessed using manually verified Apache-2.0 AND BSD-3-Clause AND MIT because the discovered licence was unknown. All AND obligations apply: Apache-2.0: A permissive dependency generally permits redistribution; retain its notices and conditions.; BSD-3-Clause: A permissive dependency generally permits redistribution; retain its notices and conditions.; MIT: A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `expression-and` (built-in); choice: `Apache-2.0 AND BSD-3-Clause AND MIT`.
Compliant	ALLOW	github.com/klauspost/compress/internal/snapref	`v1.18.7`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/klauspost/compress/blob/v1.18.7/internal/snapref/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/klauspost/compress/zstd/internal/xxhash	`v1.18.7`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/klauspost/compress/blob/v1.18.7/zstd/internal/xxhash/LICENSE.txt View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/klauspost/cpuid/v2	`v2.3.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/klauspost/cpuid/blob/v2.3.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/mailru/easyjson	`v0.9.2`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/mailru/easyjson/blob/v0.9.2/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/mattn/go-colorable	`v0.1.14`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/mattn/go-colorable/blob/v0.1.14/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/mattn/go-isatty	`v0.0.20`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/mattn/go-isatty/blob/v0.0.20/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/mitchellh/go-homedir	`v1.1.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/mitchellh/go-homedir/blob/v1.1.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/OneOfOne/xxhash	`v1.2.8`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/OneOfOne/xxhash/blob/v1.2.8/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/pelletier/go-toml/v2	`v2.2.4`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/pelletier/go-toml/blob/v2.2.4/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/perimeterx/marshmallow	`v1.1.5`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/perimeterx/marshmallow/blob/v1.1.5/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/petermattis/goid	`v0.0.0-20250813065127-a731cc31b4fe`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/petermattis/goid/blob/a731cc31b4fe/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/pjbgf/sha1cd	`v0.6.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/pjbgf/sha1cd/blob/v0.6.0/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/pquerna/ffjson	`v0.0.0-20190930134022-aa0246cd15f7`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/pquerna/ffjson/blob/aa0246cd15f7/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/ProtonMail/go-crypto	`v1.1.6`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/ProtonMail/go-crypto/blob/v1.1.6/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/rifflock/lfshook	`v0.0.0-20180920164130-b9218ef580f5`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/rifflock/lfshook/blob/b9218ef580f5/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/rs/zerolog	`v1.35.1`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/rs/zerolog/blob/v1.35.1/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/sagikazarmark/locafero	`v0.11.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/sagikazarmark/locafero/blob/v0.11.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/santhosh-tekuri/jsonschema/v6	`v6.0.3`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/santhosh-tekuri/jsonschema/blob/v6.0.3/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/sasha-s/go-deadlock	`v0.3.9`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/sasha-s/go-deadlock/blob/v0.3.9/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/sergi/go-diff/diffmatchpatch	`v1.3.2-0.20230802210424-5b0b94c5c0d3`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/sergi/go-diff/blob/5b0b94c5c0d3/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/shirou/gopsutil/v4	`v4.26.8`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/shirou/gopsutil/blob/v4.26.8/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/sirupsen/logrus	`v1.10.2`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/sirupsen/logrus/blob/v1.10.2/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/skeema/knownhosts	`v1.3.1`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/skeema/knownhosts/blob/v1.3.1/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/sourcegraph/conc	`v0.3.1-0.20240121214520-5f936abd7ae8`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/sourcegraph/conc/blob/5f936abd7ae8/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/spaolacci/murmur3	`v1.1.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/spaolacci/murmur3/blob/v1.1.0/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/spf13/afero	`v1.15.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/spf13/afero/blob/v1.15.0/LICENSE.txt View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/spf13/cast	`v1.10.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/spf13/cast/blob/v1.10.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/spf13/pflag	`v1.0.10`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/spf13/pflag/blob/v1.0.10/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/spf13/viper	`v1.21.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/spf13/viper/blob/v1.21.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/stretchr/testify	`v1.12.1`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/stretchr/testify/blob/v1.12.1/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/stretchr/testify/internal/difflib	`v1.12.1`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/stretchr/testify/blob/v1.12.1/internal/difflib/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Reviewed	ALLOW	github.com/stretchr/testify/internal/spew	`v1.12.1`	Dependency	View link	ISC	`tool`	Original declaration ISC Licence: https://github.com/stretchr/testify/blob/v1.12.1/internal/spew/LICENSE View licence file	Licence identification Discovered licence: `ISC`. Configured licence policy Automatic policy check: Does not meet the configured licence policy. Manual policy review: ISC accepted for this project as a transitive test dependency. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `ISC`.
Compliant	ALLOW	github.com/sttk/stringcase	`v1.0.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/sttk/stringcase/blob/v1.0.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/subosito/gotenv	`v1.6.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/subosito/gotenv/blob/v1.6.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	github.com/tklauser/go-sysconf	`v0.3.16`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://github.com/tklauser/go-sysconf/blob/v0.3.16/LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	github.com/tklauser/numcpus	`v0.11.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/tklauser/numcpus/blob/v0.11.0/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/xanzy/ssh-agent	`v0.3.3`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/xanzy/ssh-agent/blob/v0.3.3/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	github.com/zalando/go-keyring	`v0.2.8`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/zalando/go-keyring/blob/v0.2.8/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	go.mongodb.org/mongo-driver	`v1.17.7`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/mongodb/mongo-go-driver/blob/v1.17.7/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	go.uber.org/atomic	`v1.12.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/uber-go/atomic/blob/v1.12.0/LICENSE.txt View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	go.uber.org/mock/gomock	`v0.6.0`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/uber/mock/blob/v0.6.0/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	go.uber.org/multierr	`v1.10.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/uber-go/multierr/blob/v1.10.0/LICENSE.txt View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	go.uber.org/zap	`v1.28.0`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/uber-go/zap/blob/v1.28.0/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	ALLOW	go.yaml.in/yaml/v2	`v2.4.2`	Dependency	View link	Apache-2.0	`tool`	Original declaration Apache-2.0 Licence: https://github.com/yaml/go-yaml/blob/v2.4.2/LICENSE View licence file	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `Apache-2.0`.
Compliant	ALLOW	go.yaml.in/yaml/v3	`v3.0.5`	Dependency	View link	MIT	`tool`	Original declaration MIT Licence: https://github.com/yaml/go-yaml/blob/v3.0.5/LICENSE View licence file	Licence identification Discovered licence: `MIT`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `MIT`.
Compliant	—	Golang Utilities	`unknown`	Project	unknown	Apache-2.0	`configuration`	Original declaration Apache-2.0	Licence identification Discovered licence: `Apache-2.0`. Configured licence policy Automatic policy check: Meets the configured licence policy.
Compliant	ALLOW	golang.org/x/crypto	`v0.55.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/crypto/+/v0.55.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/exp/maps	`v0.0.0-20260410095643-746e56fc9e2f`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/exp/+/746e56fc:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/mod/semver	`v0.38.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/mod/+/v0.38.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/net	`v0.58.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/net/+/v0.58.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/oauth2	`v0.36.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/oauth2/+/v0.36.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/sync/errgroup	`v0.22.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/sync/+/v0.22.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/sys	`v0.47.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/sys/+/v0.47.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	golang.org/x/text	`v0.41.0`	Dependency	View link	BSD-3-Clause	`tool`	Original declaration BSD-3-Clause Licence: https://cs.opensource.google/go/x/text/+/v0.41.0:LICENSE View licence file	Licence identification Discovered licence: `BSD-3-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-3-Clause`.
Compliant	ALLOW	gopkg.in/warnings.v0	`v0.1.2`	Dependency	View link	BSD-2-Clause	`tool`	Original declaration BSD-2-Clause Licence: https://github.com/go-warnings/warnings/blob/v0.1.2/LICENSE View licence file	Licence identification Discovered licence: `BSD-2-Clause`. Configured licence policy Automatic policy check: Meets the configured licence policy. Dependency licence compatibility Assessment: ALLOW — A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `permissive-dependency` (built-in); choice: `BSD-2-Clause`.
Reviewed	ALLOW	sigs.k8s.io/yaml	`v1.6.0`	Dependency	unknown	Unknown	`unknown`	Licence candidates (review required) Apache-2.0; BSD-3-Clause; MIT Original declaration unknown Licence: https://github.com/kubernetes-sigs/yaml/blob/v1.6.0/LICENSE View licence file Licence: https://github.com/kubernetes-sigs/yaml/blob/v1.6.0/LICENSE View licence file Licence: https://github.com/kubernetes-sigs/yaml/blob/v1.6.0/LICENSE View licence file	Licence identification Discovered licence: `Unknown`. Manually verified licence for assessment: `BSD-3-Clause AND MIT`. Configured licence policy Automatic policy check: Does not meet the configured licence policy. Manual policy review: MIT AND BSD-3-Clause Dependency licence compatibility Assessment: ALLOW — Assessed using manually verified BSD-3-Clause AND MIT because the discovered licence was unknown. All AND obligations apply: BSD-3-Clause: A permissive dependency generally permits redistribution; retain its notices and conditions.; MIT: A permissive dependency generally permits redistribution; retain its notices and conditions. Compared with project licence `Apache-2.0`. Rule: `expression-and` (built-in); choice: `BSD-3-Clause AND MIT`.