Hi,
I am running into issues using the mojo license plugin to get an inventory of 
the licenses associated with FOSS artifact.

I was trying to generate a report on all the licenses (including those 
of dependencies) associated with the Apache Struts 2.3.12 project . 
I used the command mvn license:aggregate-add-third-party
The THIRD-PARTY.txt generated listed 11 third party dependencies. 
I notice many more listed on the mvnrepository site. 

I
 also notice quite a few listed i the struts1-core-2.3.1.2.pom (e.g. 
velocity, springframework etc.) were not included in the mojo report. I 
also notice items in the report that are not in the struts pom (e.g. 
ASM).



Any idea why I am seeing these discrepencies? 
----
List of 11 third-party dependencies.

 (BSD) ASM Commons (asm:asm-commons:3.3 - http://asm.objectweb.org/asm-commons/)
 (BSD) ASM Core (asm:asm:3.3 - http://asm.objectweb.org/asm/)
 (BSD) ASM Tree (asm:asm-tree:3.3 - http://asm.objectweb.org/asm-tree/)
 (BSD-style license) FreeMarker (org.freemarker:freemarker:2.3.18 - 
http://freemarker.org)
 (The Apache Software License, Version 2.0) Commons FileUpload 
(commons-fileupload:commons-fileupload:1.2.2 - 
http://commons.apache.org/fileupload/)
 (The Apache Software License, Version 2.0) Commons IO 
(commons-io:commons-io:2.0.1 - http://commons.apache.org/io/)
 (The Apache Software License, Version 2.0) Commons Lang 
(commons-lang:commons-lang:2.5 - http://commons.apache.org/lang/)
 (The Apache Software License, Version 2.0) OGNL - Object Graph Navigation 
Library (ognl:ognl:3.0.4 - http://ognl.org)
 (The Apache Software License, Version 2.0) Struts 2 Core 
(org.apache.struts:struts2-core:2.3.1.2 - 
http://struts.apache.org/struts2/struts2-core)
 (The Apache Software License, Version 2.0) XWork: Core 
(org.apache.struts.xwork:xwork-core:2.3.1.2 - 
http://struts.apache.org/struts2/xwork-core)
 (Unknown license) Javassist (javassist:javassist:3.11.0.GA - 
http://www.javassist.org/)

----

Reply via email to