project.spdx.yml

SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2022-08-04T12:00:00Z"
  creators:
  - "Organization: Robert Bosch GmbH"
name: "sdv-self-update-agent"
dataLicense: "CC0-1.0"
documentNamespace: "https://github.com/SoftwareDefinedVehicle/sdv-self-update-agent"
documentDescribes:
- "SPDXRef-Package-sdv-self-update-agent"
packages:
- SPDXID: "SPDXRef-Package-sdv-self-update-agent"
  description: "Self update agent."
  copyrightText: "Copyright 2022 Contributors to the Eclipse Foundation"
  downloadLocation: "git+ssh://github.com/SoftwareDefinedVehicle/sdv-self-update-agent"
  filesAnalyzed: false
  homepage: "https://github.com/SoftwareDefinedVehicle/sdv-self-update-agent"
  licenseConcluded:  "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "sdv-self-update-agent"
  originator: "Organization: Robert Bosch GmbH"
- SPDXID: "SPDXRef-Package-openssl"
  description: "OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security (TLS) protocol formerly known as the Secure Sockets Layer (SSL) protocol. The protocol implementation is based on a full-strength general purpose cryptographic library, which can also be used stand-alone."
  copyrightText: "Copyright (c) 1998-2022 The OpenSSL Project, Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson"
  downloadLocation: "git+ssh://github.com/openssl/openssl.git"
  filesAnalyzed: false
  homepage: "https://www.openssl.org/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  packageFileName: "3rdparty/openssl"
  name: "openssl"
  originator: "Organization: OpenSSL Development Team"
- SPDXID: "SPDXRef-Package-spdlog"
  description: "Very fast, header-only/compiled, C++ logging library."
  copyrightText: "Copyright(c) 2015-present, Gabi Melman & spdlog contributors"
  downloadLocation: "git+ssh://github.com/gabime/spdlog.git"
  filesAnalyzed: false
  homepage: "https://github.com/gabime/spdlog.git"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  packageFileName: "3rdparty/spdlog"
  name: "spdlog"
  originator: "Person: Gabi Melman"
- SPDXID: "SPDXRef-Package-glib"
  description: "GLib is the low-level core library that forms the basis for projects such as GTK and GNOME."
  copyrightText: "Copyright (C) 1995-1997  Peter Mattis, Spencer Kimball and Josh MacDonald"
  downloadLocation: "git+ssh://gitlab.gnome.org/GNOME/glib.git"
  filesAnalyzed: false
  homepage: "https://www.gtk.org/"
  licenseConcluded: "LGPL-2.0-or-later"
  licenseDeclared: "LGPL-2.1-or-later"
  packageFileName: "3rdparty/glib"
  name: "glib"
  originator: "Person: Peter Mattis, Spencer Kimball, Josh MacDonald"
- SPDXID: "SPDXRef-Package-paho.mqtt.c"
  description: "This code builds libraries which enable applications to connect to an MQTT broker to publish messages, and to subscribe to topics and receive published messages."
  copyrightText: "Copyright (c) 2009, 2020 IBM Corp. and others"
  downloadLocation: "git+ssh://github.com/eclipse/paho.mqtt.c.git"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/paho/"
  licenseConcluded: "EPL-2.0"
  licenseDeclared: "EPL-2.0"
  packageFileName: "3rdparty/paho.mqtt.c"
  name: "paho.mqtt.c"
  originator: "Organization: IBM Corp."
- SPDXID: "SPDXRef-Package-paho.mqtt.cpp"
  description: "This repository contains the source code for the Eclipse Paho MQTT C++ client library on memory-managed operating systems such as Linux/Posix and Windows."
  copyrightText: "Copyright (c) 2013-2017 Frank Pagliughi <fpagliughi@mindspring.com>"
  downloadLocation: "git+ssh://github.com/eclipse/paho.mqtt.cpp.git"
  filesAnalyzed: false
  homepage: "https://github.com/eclipse/paho.mqtt.cpp"
  licenseConcluded: "EPL-1.0"
  licenseDeclared: "EPL-1.0"
  packageFileName: "3rdparty/paho.mqtt.cpp"
  name: "paho.mqtt.cpp"
  originator: "Person: Frank Pagliughi"
- SPDXID: "SPDXRef-Package-curl"
  description: "Curl is a command-line tool for transferring data specified with URL syntax."
  copyrightText: "Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan"
  downloadLocation: "git+ssh://github.com/curl/curl.git"
  filesAnalyzed: false
  homepage: "https://curl.se/"
  licenseConcluded: "curl"
  licenseDeclared: "curl"
  packageFileName: "3rdparty/curl"
  name: "curl"
  originator: "Organization: Kungliga Tekniska Högskolan"
- SPDXID: "SPDXRef-Package-googletest"
  description: "GoogleTest and GoogleMock testing framework."
  copyrightText: "Copyright 2008, Google Inc."
  downloadLocation: "git+ssh://github.com/google/googletest"
  filesAnalyzed: false
  homepage: "https://google.github.io/googletest/"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  packageFileName: "3rdparty/googletest"
  name: "googletest"
  originator: "Organization: Google Inc."
- SPDXID: "SPDXRef-Package-nlohmann-json"
  description: "JSON for Modern C++"
  copyrightText: "Copyright © 2013-2022 Niels Lohmann"
  downloadLocation: "git+ssh://github.com/nlohmann/json.git"
  filesAnalyzed: false
  homepage: "https://github.com/nlohmann/json"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  packageFileName: "3rdparty/nlohmann-json"
  name: "nlohmann-json"
  originator: "Person: Niels Lohmann"
relationships:
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-paho.mqtt.c"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-paho.mqtt.cpp"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-openssl"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-openssl"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-spdlog"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-glib"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-curl"
- spdxElementId: "SPDXRef-Package-googletest"
  relationshipType: "TEST_OF"
  relatedSpdxElement: "SPDXRef-Package-sdv-self-update-agent"
- spdxElementId: "SPDXRef-Package-sdv-self-update-agent"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-nlohmann-json"