Engage in the Eclipse IP Due Diligence Process

[waynebeaton]

I did a quick test with the Eclipse Dash License Tool on the one of the go.sum files in this repository and discovered some party libraries that may require vetting via the Eclipse IP Due Diligence Process.

$ java -jar /gitroot/dash-licenses/shaded/target/org.eclipse.dash.licenses-1.1.1-SNAPSHOT.jar agent/go.sum
[main] INFO Querying Eclipse Foundation for license data for 25 items.
[main] INFO Found 7 items.
[main] INFO Querying ClearlyDefined for license data for 18 items.
[main] INFO Found 18 items.
[main] INFO License information could not be automatically verified for the following content:
[main] INFO 
[main] INFO go/golang/github.com%2Fcheggaaa/pb/v2.0.7
[main] INFO go/golang/gopkg.in%2Ffatih/color.v1/v1.7.0
[main] INFO 
[main] INFO This content is either not correctly mapped by the system, or requires review.

Please make sure that you engage in the IP Due Diligence Process for all project dependencies.

The tool can be used to automatically generate requests for the IP Team to review this content.

Once you've taken care of this, please connect with the EMO as soon as possible to engage in a progress review as is required by the Eclipse Foundation Development Process.

/cc @mtdelgadoa

[waynebeaton]

@svengru and @Pellifer this requires your attention, please.

[waynebeaton]

@svengru and @Pellifer this requires your attention, please.

Ping.