mosip · Mahesh-Binayak · Dec 24, 2025 · Dec 23, 2025
diff --git a/THIRD-PARTY-NOTICES b/THIRD-PARTY-NOTICES
@@ -0,0 +1,205 @@
+THIRD-PARTY-NOTICES
+
+This project includes third-party packages that are distributed under various open-source licenses. Below is a list of packages and their associated licenses.
+
+================================================================================
+Package: Spring Boot, Spring Framework, Spring Cloud & Spring Kafka (starters and core modules)
+Version: 3.3.x / 6.x family (per SBOM; e.g., spring-boot-starter-webflux 3.3.2)
+License: Apache License 2.0
+Homepage: https://spring.io/projects/spring-boot
+================================================================================
+
+================================================================================
+Package: Spring Batch (Core & Integration Modules)
+Version: 5.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://spring.io/projects/spring-batch
+================================================================================
+
+================================================================================
+Package: Spring Security Test
+Version: 6.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://spring.io/projects/spring-security
+================================================================================
+
+================================================================================
+Package: SpringDoc OpenAPI (WebMVC UI Starter & Maven Plugin)
+Version: 2.x / 0.2 (per SBOM)
+License: Apache License 2.0
+Homepage: https://springdoc.org/
+================================================================================
+
+================================================================================
+Package: Micrometer (Core & Prometheus Registry)
+Version: 1.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://micrometer.io/
+================================================================================
+
+================================================================================
+Package: Jackson (Core, Annotations, Databind, Dataformat XML, JAXB Annotations, Afterburner)
+Version: 2.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://github.com/FasterXML/jackson
+================================================================================
+
+================================================================================
+Package: Apache Commons (Lang3, Codec)
+Version: 3.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://commons.apache.org/
+================================================================================
+
+================================================================================
+Package: Apache HttpComponents (HttpClient, HttpMime)
+Version: 4.5.x (per SBOM; e.g., httpmime 4.5.9)
+License: Apache License 2.0
+Homepage: https://hc.apache.org/httpcomponents-client-4.5.x/
+================================================================================
+
+================================================================================
+Package: JSON Libraries (JSON.org, JSON Simple, JSON Path)
+Version: Various (per SBOM)
+License: 
+  - JSON.org: JSON License (Inferred from project’s official repository)
+  - JSON Simple & JSON Path: Apache License 2.0 (Inferred from project’s official repositories)
+Homepage: 
+  - JSON.org: https://www.json.org/
+  - JSON Simple: https://github.com/fangyidong/json-simple
+  - JSON Path: https://github.com/json-path/JsonPath
+================================================================================
+
+================================================================================
+Package: Hibernate Validator
+Version: 8.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://hibernate.org/validator/
+================================================================================
+
+================================================================================
+Package: PostgreSQL JDBC Driver
+Version: 42.x family (per SBOM)
+License: PostgreSQL License (BSD-style) (Inferred from project’s official repository)
+Homepage: https://jdbc.postgresql.org/
+================================================================================
+
+================================================================================
+Package: TensorFlow Java
+Version: 1.15.0
+License: Apache License 2.0
+Homepage: https://www.tensorflow.org/
+================================================================================
+
+================================================================================
+Package: OpenCV Java (org.openpnp:opencv)
+Version: 4.5.3-4
+License: BSD 3-Clause
+Homepage: https://github.com/openpnp/opencv
+================================================================================
+
+================================================================================
+Package: Project Lombok
+Version: 1.x family (per SBOM)
+License: MIT License (Inferred from project’s official repository)
+Homepage: https://projectlombok.org/
+================================================================================
+
+================================================================================
+Package: Testing Libraries (JUnit 4, JUnit Vintage, Mockito, PowerMock, ByteBuddy, Objenesis)
+Version: Various (per SBOM)
+License: 
+  - JUnit 4: Eclipse Public License 1.0 (Inferred from project’s official repository)
+  - JUnit Vintage: Eclipse Public License 2.0 (Inferred from project’s official repository)
+  - Mockito: MIT License (Inferred from project’s official repository)
+  - PowerMock: Apache License 2.0 (Inferred from project’s official repository)
+  - ByteBuddy: Apache License 2.0 (Inferred from project’s official repository)
+  - Objenesis: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: 
+  - JUnit: https://junit.org/
+  - Mockito: https://site.mockito.org/
+  - PowerMock: https://github.com/powermock/powermock
+  - ByteBuddy: https://bytebuddy.net/
+  - Objenesis: https://objenesis.org/
+================================================================================
+
+================================================================================
+Package: Apache Maven Build Plugins (Compiler, Source, Jar, War, Surefire, GPG, Javadoc, Shade, Antrun)
+Version: Various 2.x–3.x (per SBOM)
+License: Apache License 2.0
+Homepage: https://maven.apache.org/plugins/
+================================================================================
+
+================================================================================
+Package: Central Publishing Maven Plugin
+Version: 0.7.0
+License: Apache License 2.0
+Homepage: https://central.sonatype.org/publish/publish-maven/
+================================================================================
+
+================================================================================
+Package: Spring Boot Maven Plugin
+Version: 3.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://docs.spring.io/spring-boot/docs/current/maven-plugin/reference/html/
+================================================================================
+
+================================================================================
+Package: Spring Boot Actuator & Micrometer Prometheus Integration
+Version: 3.3.x / 1.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repositories)
+Homepage: 
+  - Spring Boot Actuator: https://spring.io/projects/spring-boot
+  - Micrometer Prometheus Registry: https://micrometer.io/docs/registry/prometheus
+================================================================================
+
+================================================================================
+Package: MOSIP Platform Components (Kernel, ID Repository, Authentication Modules, Demographics & Biometrics APIs, WebSub Client, Template Manager, ID Generators, Key Manager, CBEFF Utilities, Data Access)
+Version: 1.3.0-SNAPSHOT and 1.3.x family (per SBOM)
+License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories)
+Homepage: https://github.com/mosip
+================================================================================
+
+================================================================================
+Package: MOSIP e-Signet Components (esignet-core, esignet-integration-api)
+Version: 1.3.x family (per SBOM)
+License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories)
+Homepage: https://github.com/mosip/esignet
+================================================================================
+
+================================================================================
+Package: MOSIP SDKs & Utilities (biosdk-client, demosdk, biometrics-util, testrig apitest commons)
+Version: 1.3.x family (per SBOM)
+License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories)
+Homepage: https://github.com/mosip
+================================================================================
+
+================================================================================
+Package: SourceAFIS for Java
+Version: 3.x family (per SBOM)
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://sourceafis.machinezoo.com/
+================================================================================
+
+================================================================================
+Package: Linked Data Signatures Java
+Version: 1.0.0
+License: Apache License 2.0 (Inferred from project’s official repository)
+Homepage: https://github.com/WebOfTrust/ld-signatures-java
+================================================================================
+
+================================================================================
+Package: MOSIP OpenID Bridge & WebSub Client APIs
+Version: 1.3.x family (per SBOM)
+License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories)
+Homepage: https://github.com/mosip
+================================================================================
+
+================================================================================
+Package: MOSIP Authentication Services (Core, Common, Filter APIs, Hotlist Filter, Auth Type Lock Filter)
+Version: 1.3.x family (per SBOM)
+License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories)
+Homepage: https://github.com/mosip/id-authentication
+================================================================================
+
+Full license texts and additional details for each of the above packages are available in the license/ directory of this repository. Please refer to those files or the original source of each package for complete legal terms and conditions.