Changes in Update Released on 05-February-2024
This update includes the changes described in the following sections.
Issues/Bugs Addressed
The following issues were addressed in the Update:
| Issue ID | Issue Summary |
|---|---|
| SCA-51559 | Fix to handle "rejected" cves from NVD in data library. |
| SCA-38151, SCA-51747, SCA-51959 | Addition/update license evidence mechanism and license detection capability for licenses like Yahoo! Public License, Open Software License, NASA Open Source Agreement, Sleepycat License etc |
| SCA-51269, SCA-51036, SCA-51858 | Added/updated component, version, license or license mappings in data library for the requested components, details are in the separate sections below. |
Enhanced License Detection Capability for Components
License detection capability and license evidence mechanism for the following components was updated/added:
- SIL Open Font License 1.1
- Yahoo! Public License v1.0
- Yahoo! Public License v1.1
- Open Software License 1.0
- Open Software License 1.1
- Open Software License 2.0
- Open Software License 2.1
- Open Software License 3.0
- Multics License
- NASA Open Source Agreement 1.3
- Naumen Public License
- Apple Public Source License 1.0
- CUA Office Public License v1.0
- Simple Public License 2.0
- Sleepycat License
- SugarCRM Public License v1.1.3
- Independent JPEG Group License
New/Update Component Requests
- ljharb-define-data-property (Component_id:31686787)
- editd-jquery-menu-aim (Component_id:31686788)
- ljharb-set-function-length (Component_id:31686789)
- imagegear-net-samples (Component_id: 31490027)
- The-Ultimate-Toolbox-Application-Skins (Component_id: 31490026)
- SNMP4j (Component_id: 31490028)
- OpenSSL Project (Component_id: 58316)
- Bouncy Castle Crypto Csharp (Component_id: 11253334)
New/Update License Requests
- ANTLR 3 License - Updated the license url to https://www.antlr3.org/license.html (license_id: )
Collector Status
The following table lists Collector Status information.
| Name | Date of Last Successful Run |
|---|---|
| npm | 1/24/2024 |
| crates | 8/25/2022 |
| cpan | 1/18/2024 |
| clojars | 1/18/2024 |
| rubygems | 1/18/2024 |
| maven-google | 1/19/2024 |
| cran | 1/20/2024 |
| hackage | 1/21/2024 |
| packagist | 1/21/2024 |
| go | 1/22/2024 |
| pypi | 1/08/2024 |
| nuget gallery | 1/11/2024 |
| maven2-ibiblio | 1/10/2024 |
| github | 1/23/2024 |
| fedora-koji | 1/17/2024 |
| alpine | 1/24/2024 |
| gitlab | 6/6/2023 |
| debian | 1/22/2024 |