You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@skywalking.apache.org by wu...@apache.org on 2026/08/24 08:16:40 UTC
(skywalking-horizon-ui) 01/01: chore(license): generate the binary LICENSE with license-eye
This is an automated email from the ASF dual-hosted git repository.
wu-sheng pushed a commit to branch chore/license-eye-binary-license
in repository https://gitbox.apache.org/repos/asf/skywalking-horizon-ui.git
commit 5df84a47bc54df4a82fe20219f242b9154b33557
Author: Wu Sheng <wu...@foxmail.com>
AuthorDate: Mon Aug 24 16:16:11 2026 +0800
chore(license): generate the binary LICENSE with license-eye
The binary tarball's LICENSE, NOTICE and per-dependency license texts were
produced by two bespoke scripts totalling ~560 lines. license-eye now reads
pnpm workspaces (apache/skywalking-eyes#282), so it can do the job the same
way the skywalking repo does it: render the LICENSE from a template, and let
`git diff` against the committed copy be the drift gate.
`pnpm licenses:bin:update` regenerates the file; `pnpm licenses:bin:check`
regenerates and fails on any difference. Both the pre-tag gate and CI run the
check, so a dependency added or removed without refreshing the LICENSE is
caught. The release script now COPIES the reviewed bytes into the tarball
rather than regenerating them at package time, so what ships cannot differ
from what the vote saw.
The dependency set is unchanged: 364 packages before and after, none added,
none lost, multi-version packages still listed once per version.
Two things move from generated to hand-maintained, which CLAUDE.md now
documents alongside the workflow for adding a dependency:
- licenses/ carries the full text only for licenses outside the standard
permissive set (MIT, ISC, BSD-2-Clause, BSD-3-Clause, 0BSD, Apache-2.0):
five BlueOak-1.0.0 packages, two OFL-1.1 fonts, and the dual-licensed
type-fest, dompurify and robust-predicates. Ten files rather than 332.
- NOTICE is static. It previously claimed no bundled package ships a NOTICE
file, which was wrong — echarts ships one — but that NOTICE carries nothing
beyond its own copyright line, which ours already states, so there is
nothing to carry across and the false claim is gone.
`.licenserc.yaml` loses both of its stale entries: the `excludes:` block never
applied to Node projects at all, since no Node resolver consults it, and the
hand-written license for @pmndrs/pointer-events is no longer needed now that
license-eye reads the file its package.json points at.
license-eye is installed from a commit rather than v0.8.0 because pnpm support
landed after that release; the CI comment says to move to a tag once one ships.
---
.github/workflows/ci.yaml | 42 +-
.licenserc.yaml | 19 +-
CLAUDE.md | 7 +
apps/bff/package.json | 1 +
apps/ui/package.json | 1 +
dist-material/release-docs/LICENSE | 746 ++++++++++-----------
dist-material/release-docs/LICENSE.tpl | 218 +-----
dist-material/release-docs/NOTICE | 8 -
dist-material/release-docs/NOTICE.tpl | 12 -
.../LICENSE-dompurify-3.4.13.txt} | 25 +-
.../LICENSE-fontsource-variable-inter-5.3.0.txt | 93 +++
...SE-fontsource-variable-jetbrains-mono-5.3.0.txt | 93 +++
.../release-docs/licenses/LICENSE-glob-13.0.6.md | 63 ++
.../licenses/LICENSE-lru-cache-11.5.2.md | 55 ++
.../licenses/LICENSE-minimatch-10.2.6.md | 55 ++
.../licenses/LICENSE-minipass-7.1.3.md | 55 ++
.../licenses/LICENSE-path-scurry-2.0.2.md | 55 ++
.../licenses/LICENSE-robust-predicates-3.0.3.txt | 24 +
.../licenses/LICENSE-type-fest-0.7.1.txt | 9 +
package.json | 4 +-
packages/api-client/package.json | 1 +
packages/design-tokens/package.json | 1 +
scripts/check-dist-licenses.mjs | 170 -----
scripts/collect-dist-licenses.mjs | 388 -----------
scripts/release.sh | 28 +-
25 files changed, 937 insertions(+), 1236 deletions(-)
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 796e4c39..33f4185c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -39,7 +39,7 @@ jobs:
with:
persist-credentials: false
- name: Check license header
- uses: apache/skywalking-eyes@5b7ee1731d036b5aac68f8bd3fc9e6f98ada082e
+ uses: apache/skywalking-eyes@61275cc80d0798a405cb070f7d3a8aaf7cf2c2c1 # v0.8.0
build-and-check:
# Every Node-side gate in one job. They all need the same checkout + pnpm
@@ -115,18 +115,29 @@ jobs:
- name: Package the distributable
run: pnpm package
- # After `pnpm package`, never before: collect-dist-licenses writes its
- # LICENSE / NOTICE / report into dist/, and packaging starts by wiping
- # that directory.
- # The binary tarball bundles the full production dependency tree — the
- # BFF runtime deps (dist/node_modules) AND the UI deps Vite compiles into
- # the static bundle — so ASF policy requires every one of their licenses
- # reproduced in the binary LICENSE/NOTICE. This fails if either:
- # 1. a dep carries a Category-X / unknown license (check-dist-licenses), or
- # 2. the committed binary LICENSE/NOTICE reference is stale (--check) —
- # i.e. prod deps changed without `pnpm licenses:bin:update`.
- - name: Verify binary LICENSE/NOTICE (drift + ASF allow/deny)
- run: pnpm licenses:bin:check
+ # The binary tarball bundles the whole production dependency tree — the
+ # BFF runtime deps and the UI deps Vite compiles into the static bundle —
+ # so the binary LICENSE has to name every one of them. license-eye
+ # regenerates it from LICENSE.tpl and `git diff` is the drift gate: a
+ # dependency added or removed without running `pnpm licenses:bin:update`
+ # fails here.
+ #
+ # Built from a commit rather than v0.8.0 because pnpm support landed after
+ # that release; revert to a tag once one ships with it.
+ #
+ # A license the tool cannot identify makes `dependency resolve` itself
+ # exit non-zero, so an unknown license fails this step too. The licenses/
+ # directory beside the LICENSE is maintained by hand — see CLAUDE.md.
+ - name: Set up Go for license-eye
+ uses: actions/setup-go@v6
+ with:
+ go-version: '1.25'
+ cache: false
+
+ - name: Verify binary LICENSE is current
+ run: |
+ go install github.com/apache/skywalking-eyes/cmd/license-eye@ab60c97524d4fe73142b27055a262cf1520f66a4
+ pnpm licenses:bin:check
- name: Compare source vs. binary LICENSE/NOTICE shape
run: |
@@ -153,9 +164,8 @@ jobs:
with:
name: dist-license-report
path: |
- dist/LICENSE
- dist/NOTICE
- dist/.dependency-report.json
+ dist-material/release-docs/LICENSE
+ dist-material/release-docs/NOTICE
# A dist/ that assembles but 404s at `/` is not a working release.
- name: Boot the packaged server and smoke-test it
diff --git a/.licenserc.yaml b/.licenserc.yaml
index fa7c264e..d9396845 100644
--- a/.licenserc.yaml
+++ b/.licenserc.yaml
@@ -58,10 +58,9 @@ header:
- 'src/types/auto-imports.d.ts'
- 'src/types/components.d.ts'
- 'public/**'
- # LICENSE.tpl / NOTICE.tpl in dist-material/release-docs/ render the
- # binary tarball's LICENSE / NOTICE (scripts/collect-dist-licenses.mjs).
- # Their contents ARE the Apache 2.0 license text and the ASF notice
- # text — an extra license-header comment would bleed into the output.
+ # LICENSE.tpl in dist-material/release-docs/ is the template license-eye
+ # renders the binary tarball's LICENSE from. A license-header comment on it
+ # would bleed straight into that output.
- 'dist-material/release-docs/**/*.tpl'
comment: on-failure
@@ -72,15 +71,3 @@ dependency:
- apps/bff/package.json
- packages/api-client/package.json
- packages/design-tokens/package.json
- excludes:
- - name: '@skywalking-horizon-ui/*' # Self workspace packages
- recursive: true
- # Human-asserted licenses for bundled deps whose package.json omits or
- # mis-declares `license`. This is skywalking-eyes' native unknown-license
- # mechanism; it is ALSO consumed by scripts/collect-dist-licenses.mjs when
- # it builds the binary tarball's LICENSE. Each entry MUST be verified
- # against the package's own LICENSE/COPYING file (reproduced under
- # dist/licenses/) before being added.
- licenses:
- - name: '@pmndrs/pointer-events'
- license: MIT # ships a verbatim MIT LICENSE file; package.json declares the non-SPDX "SEE LICENSE IN LICENSE"
diff --git a/CLAUDE.md b/CLAUDE.md
index 28095201..4ae4bf05 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -86,6 +86,13 @@ English is the source of truth. Every UI string and every translatable template
- **One icon component.** No icon font, no inlined SVG one-offs.
- **No CSS-in-JS, no Tailwind.** The design is built on CSS custom properties; Tailwind fights the token system.
- **License headers** on every `.ts` / `.vue` / `.js` / `.yaml` / `.yml` / `.css` / `.scss`. JSON, Markdown, lock files, and generated `.d.ts` are excluded — see `.licenserc.yaml`. CI enforces; run `license-eye -c .licenserc.yaml header check` before pushing.
+- **Adding or removing a production dependency means updating the binary LICENSE.** The binary tarball bundles the whole production tree, so ASF requires the binary `LICENSE` to name every bundled package. It is generated, not hand-edited: run `pnpm licenses:bin:update` and commit the result. CI regenerates it and fails on any diff, so a dependency change that skips this step is caught — but it is caught in CI rather than in review, which wastes a round trip.
+
+ **If the new dependency's license is not one of the standard permissive ones** — MIT, ISC, BSD-2-Clause, BSD-3-Clause, 0BSD, Apache-2.0 — its full license text must also ship. Copy the package's own `LICENSE` file to `dist-material/release-docs/licenses/LICENSE-<name>-<version>.<ext>` and commit it; that directory is maintained BY HAND, nothing generates it. The binary `LICENSE` preamble promises those texts are there, so a missing one makes the release artifact lie. Dual-licensed pack [...]
+
+ **A dependency whose license `license-eye` cannot identify fails the build**, because `dependency resolve` exits non-zero on an unresolved package. Do not paper over it with a `dependency.licenses` entry in `.licenserc.yaml` unless the package genuinely ships its terms somewhere the tool cannot read — verify against the package's own LICENSE file first, and say in a comment what you verified.
+
+ `NOTICE` is hand-maintained too. Carry a bundled project's NOTICE content into ours only when that project is Apache-2.0 AND its NOTICE says something beyond its own copyright line — boilerplate "developed at The Apache Software Foundation" adds nothing, since ours already says it.
- **Multi-layer is the spine.** Almost every screen has "this could appear in multiple layers" semantics. Build for that from day one.
- **Synced crosshairs.** Multiple time-series on a dashboard share one cursor. Don't build charts that ignore this.
- **Density beats whitespace.** This is an observability-class UI; information density is a feature.
diff --git a/apps/bff/package.json b/apps/bff/package.json
index 88b9ed2c..b07c407c 100644
--- a/apps/bff/package.json
+++ b/apps/bff/package.json
@@ -1,6 +1,7 @@
{
"name": "@skywalking-horizon-ui/bff",
"version": "1.0.0-dev",
+ "license": "Apache-2.0",
"private": true,
"type": "module",
"main": "dist/server.js",
diff --git a/apps/ui/package.json b/apps/ui/package.json
index ed2f57a8..8ae9716f 100644
--- a/apps/ui/package.json
+++ b/apps/ui/package.json
@@ -1,6 +1,7 @@
{
"name": "@skywalking-horizon-ui/ui",
"version": "1.0.0-dev",
+ "license": "Apache-2.0",
"private": true,
"type": "module",
"scripts": {
diff --git a/dist-material/release-docs/LICENSE b/dist-material/release-docs/LICENSE
index e28778ff..07656a0e 100644
--- a/dist-material/release-docs/LICENSE
+++ b/dist-material/release-docs/LICENSE
@@ -137,8 +137,8 @@
6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
- except as required for describing the origin of the Work and
- reproducing the content of the NOTICE file.
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
@@ -162,7 +162,7 @@
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.
- 9. Accepting Warranty or Support. While redistributing
+ 9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
@@ -171,34 +171,7 @@
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
- of your accepting any such warranty or support.
-
- END OF TERMS AND CONDITIONS
-
- APPENDIX: How to apply the Apache License to your work.
-
- To apply the Apache License to your work, attach the following
- boilerplate notice, with the fields enclosed by brackets "[]"
- replaced with your own identifying information. (Don't include
- the brackets!) The text should be enclosed in the appropriate
- comment syntax for the file format. We also recommend that a
- file or class name and description of purpose be included on the
- same "printed page" as the copyright notice for easier
- identification within third-party archives.
-
- Copyright [yyyy] [name of copyright owner]
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
+ of your accepting any such warranty or additional liability.
========================================================================
@@ -207,407 +180,410 @@
The Apache SkyWalking Horizon UI binary distribution includes a number
of subcomponents with separate copyright notices and license terms.
Your use of the source code for these subcomponents is subject to the
- terms and conditions of the licenses listed below. The full text of
- each license is reproduced in the licenses/ directory of this
+ terms and conditions of the licenses listed below.
+
+ Subcomponents under a license other than the standard permissive ones
+ (MIT, ISC, BSD-2-Clause, BSD-3-Clause, 0BSD and Apache-2.0) have their
+ full license text reproduced in the licenses/ directory of this
distribution.
By license family, the bundled third-party software is:
========================================================================
-
--- (MIT OR CC0-1.0) ---
- * type-fest@0.7.1 (licenses/type-fest-0.7.1/license)
+ * type-fest@0.7.1
--- (MPL-2.0 OR Apache-2.0) ---
- * dompurify@3.4.13 (licenses/dompurify-3.4.13/LICENSE)
+ * dompurify@3.4.13
--- 0BSD ---
- * tslib@2.3.0 (licenses/tslib-2.3.0/LICENSE.txt)
- * tslib@2.8.1 (licenses/tslib-2.8.1/LICENSE.txt)
+ * tslib@2.3.0
+ * tslib@2.8.1
--- Apache-2.0 ---
- * @aws-sdk/client-bedrock-agent-runtime@3.1100.0 (licenses/@aws-sdk__client-bedrock-agent-runtime-3.1100.0/LICENSE)
- * @aws-sdk/client-bedrock-runtime@3.1100.0 (licenses/@aws-sdk__client-bedrock-runtime-3.1100.0/LICENSE)
- * @aws-sdk/client-kendra@3.1100.0 (licenses/@aws-sdk__client-kendra-3.1100.0/LICENSE)
- * @aws-sdk/core@3.977.4 (licenses/@aws-sdk__core-3.977.4/LICENSE)
- * @aws-sdk/credential-provider-env@3.972.65 (licenses/@aws-sdk__credential-provider-env-3.972.65/LICENSE)
+ * @aws-sdk/client-bedrock-agent-runtime@3.1100.0
+ * @aws-sdk/client-bedrock-runtime@3.1100.0
+ * @aws-sdk/client-kendra@3.1100.0
+ * @aws-sdk/core@3.977.4
+ * @aws-sdk/credential-provider-env@3.972.65
* @aws-sdk/credential-provider-http@3.972.67
- * @aws-sdk/credential-provider-ini@3.973.10 (licenses/@aws-sdk__credential-provider-ini-3.973.10/LICENSE)
+ * @aws-sdk/credential-provider-ini@3.973.10
* @aws-sdk/credential-provider-login@3.972.72
- * @aws-sdk/credential-provider-node@3.972.76 (licenses/@aws-sdk__credential-provider-node-3.972.76/LICENSE)
- * @aws-sdk/credential-provider-process@3.972.65 (licenses/@aws-sdk__credential-provider-process-3.972.65/LICENSE)
- * @aws-sdk/credential-provider-sso@3.973.9 (licenses/@aws-sdk__credential-provider-sso-3.973.9/LICENSE)
- * @aws-sdk/credential-provider-web-identity@3.972.71 (licenses/@aws-sdk__credential-provider-web-identity-3.972.71/LICENSE)
- * @aws-sdk/eventstream-handler-node@3.972.31 (licenses/@aws-sdk__eventstream-handler-node-3.972.31/LICENSE)
- * @aws-sdk/middleware-eventstream@3.972.26 (licenses/@aws-sdk__middleware-eventstream-3.972.26/LICENSE)
- * @aws-sdk/middleware-websocket@3.972.47 (licenses/@aws-sdk__middleware-websocket-3.972.47/LICENSE)
+ * @aws-sdk/credential-provider-node@3.972.76
+ * @aws-sdk/credential-provider-process@3.972.65
+ * @aws-sdk/credential-provider-sso@3.973.9
+ * @aws-sdk/credential-provider-web-identity@3.972.71
+ * @aws-sdk/eventstream-handler-node@3.972.31
+ * @aws-sdk/middleware-eventstream@3.972.26
+ * @aws-sdk/middleware-websocket@3.972.47
* @aws-sdk/nested-clients@3.997.39
- * @aws-sdk/signature-v4-multi-region@3.996.43 (licenses/@aws-sdk__signature-v4-multi-region-3.996.43/LICENSE)
- * @aws-sdk/token-providers@3.1100.0 (licenses/@aws-sdk__token-providers-3.1100.0/LICENSE)
- * @aws-sdk/types@3.974.2 (licenses/@aws-sdk__types-3.974.2/LICENSE)
- * @aws-sdk/xml-builder@3.972.37 (licenses/@aws-sdk__xml-builder-3.972.37/LICENSE)
- * @aws/lambda-invoke-store@0.3.0 (licenses/@aws__lambda-invoke-store-0.3.0/LICENSE)
- * @smithy/core@3.31.1 (licenses/@smithy__core-3.31.1/LICENSE)
- * @smithy/credential-provider-imds@4.4.16 (licenses/@smithy__credential-provider-imds-4.4.16/LICENSE)
- * @smithy/fetch-http-handler@5.6.13 (licenses/@smithy__fetch-http-handler-5.6.13/LICENSE)
- * @smithy/node-http-handler@4.9.13 (licenses/@smithy__node-http-handler-4.9.13/LICENSE)
- * @smithy/signature-v4@5.6.12 (licenses/@smithy__signature-v4-5.6.12/LICENSE)
- * @smithy/types@4.16.1 (licenses/@smithy__types-4.16.1/LICENSE)
- * d3-flame-graph@4.1.3 (licenses/d3-flame-graph-4.1.3/LICENSE)
+ * @aws-sdk/signature-v4-multi-region@3.996.43
+ * @aws-sdk/token-providers@3.1100.0
+ * @aws-sdk/types@3.974.2
+ * @aws-sdk/xml-builder@3.972.37
+ * @aws/lambda-invoke-store@0.3.0
+ * @smithy/core@3.31.1
+ * @smithy/credential-provider-imds@4.4.16
+ * @smithy/fetch-http-handler@5.6.13
+ * @smithy/node-http-handler@4.9.13
+ * @smithy/signature-v4@5.6.12
+ * @smithy/types@4.16.1
+ * d3-flame-graph@4.1.3
* draco3d@1.5.7
- * echarts@6.1.0 (licenses/echarts-6.1.0/LICENSE)
- * openai@6.49.0 (licenses/openai-6.49.0/LICENSE)
- * typescript@5.6.3 (licenses/typescript-5.6.3/LICENSE.txt)
+ * echarts@6.1.0
+ * openai@6.49.0
+ * typescript@5.6.3
--- BSD-2-Clause ---
- * entities@7.0.1 (licenses/entities-7.0.1/LICENSE)
- * json-schema-typed@8.0.2 (licenses/json-schema-typed-8.0.2/LICENSE.md)
+ * entities@7.0.1
+ * json-schema-typed@8.0.2
--- BSD-3-Clause ---
- * d3-ease@3.0.1 (licenses/d3-ease-3.0.1/LICENSE)
- * fast-uri@3.1.5 (licenses/fast-uri-3.1.5/LICENSE)
- * fast-uri@4.1.2 (licenses/fast-uri-4.1.2/LICENSE)
- * ieee754@1.2.1 (licenses/ieee754-1.2.1/LICENSE)
- * light-my-request@6.6.0 (licenses/light-my-request-6.6.0/LICENSE)
- * qs@6.15.3 (licenses/qs-6.15.3/LICENSE.md)
- * rw@1.3.3 (licenses/rw-1.3.3/LICENSE)
- * secure-json-parse@2.7.0 (licenses/secure-json-parse-2.7.0/LICENSE.md)
- * secure-json-parse@4.1.0 (licenses/secure-json-parse-4.1.0/LICENSE)
- * source-map-js@1.2.1 (licenses/source-map-js-1.2.1/LICENSE)
- * zrender@6.1.0 (licenses/zrender-6.1.0/LICENSE)
+ * d3-ease@3.0.1
+ * fast-uri@3.1.5
+ * fast-uri@4.1.2
+ * ieee754@1.2.1
+ * light-my-request@6.6.0
+ * qs@6.15.3
+ * rw@1.3.3
+ * secure-json-parse@2.7.0
+ * secure-json-parse@4.1.0
+ * source-map-js@1.2.1
+ * zrender@6.1.0
--- BlueOak-1.0.0 ---
- * glob@13.0.6 (licenses/glob-13.0.6/LICENSE.md)
- * lru-cache@11.5.2 (licenses/lru-cache-11.5.2/LICENSE.md)
- * minimatch@10.2.6 (licenses/minimatch-10.2.6/LICENSE.md)
- * minipass@7.1.3 (licenses/minipass-7.1.3/LICENSE.md)
- * path-scurry@2.0.2 (licenses/path-scurry-2.0.2/LICENSE.md)
+ * glob@13.0.6
+ * lru-cache@11.5.2
+ * minimatch@10.2.6
+ * minipass@7.1.3
+ * path-scurry@2.0.2
--- ISC ---
- * d3@7.9.0 (licenses/d3-7.9.0/LICENSE)
- * d3-array@3.2.4 (licenses/d3-array-3.2.4/LICENSE)
- * d3-axis@3.0.0 (licenses/d3-axis-3.0.0/LICENSE)
- * d3-brush@3.0.0 (licenses/d3-brush-3.0.0/LICENSE)
- * d3-chord@3.0.1 (licenses/d3-chord-3.0.1/LICENSE)
- * d3-color@3.1.0 (licenses/d3-color-3.1.0/LICENSE)
- * d3-contour@4.0.2 (licenses/d3-contour-4.0.2/LICENSE)
- * d3-delaunay@6.0.4 (licenses/d3-delaunay-6.0.4/LICENSE)
- * d3-dispatch@3.0.1 (licenses/d3-dispatch-3.0.1/LICENSE)
- * d3-drag@3.0.0 (licenses/d3-drag-3.0.0/LICENSE)
- * d3-dsv@3.0.1 (licenses/d3-dsv-3.0.1/LICENSE)
- * d3-fetch@3.0.1 (licenses/d3-fetch-3.0.1/LICENSE)
- * d3-force@3.0.0 (licenses/d3-force-3.0.0/LICENSE)
- * d3-format@3.1.2 (licenses/d3-format-3.1.2/LICENSE)
- * d3-geo@3.1.1 (licenses/d3-geo-3.1.1/LICENSE)
- * d3-hierarchy@3.1.2 (licenses/d3-hierarchy-3.1.2/LICENSE)
- * d3-interpolate@3.0.1 (licenses/d3-interpolate-3.0.1/LICENSE)
- * d3-path@3.1.0 (licenses/d3-path-3.1.0/LICENSE)
- * d3-polygon@3.0.1 (licenses/d3-polygon-3.0.1/LICENSE)
- * d3-quadtree@3.0.1 (licenses/d3-quadtree-3.0.1/LICENSE)
- * d3-random@3.0.1 (licenses/d3-random-3.0.1/LICENSE)
- * d3-scale@4.0.2 (licenses/d3-scale-4.0.2/LICENSE)
- * d3-scale-chromatic@3.1.0 (licenses/d3-scale-chromatic-3.1.0/LICENSE)
- * d3-selection@3.0.0 (licenses/d3-selection-3.0.0/LICENSE)
- * d3-shape@3.2.0 (licenses/d3-shape-3.2.0/LICENSE)
- * d3-time@3.1.0 (licenses/d3-time-3.1.0/LICENSE)
- * d3-time-format@4.1.0 (licenses/d3-time-format-4.1.0/LICENSE)
- * d3-timer@3.0.1 (licenses/d3-timer-3.0.1/LICENSE)
- * d3-transition@3.0.1 (licenses/d3-transition-3.0.1/LICENSE)
- * d3-zoom@3.0.0 (licenses/d3-zoom-3.0.0/LICENSE)
- * delaunator@5.1.0 (licenses/delaunator-5.1.0/LICENSE)
- * fastq@1.20.1 (licenses/fastq-1.20.1/LICENSE)
- * inherits@2.0.4 (licenses/inherits-2.0.4/LICENSE)
- * internmap@2.0.3 (licenses/internmap-2.0.3/LICENSE)
- * isexe@2.0.0 (licenses/isexe-2.0.0/LICENSE)
- * once@1.4.0 (licenses/once-1.4.0/LICENSE)
- * pg-int8@1.0.1 (licenses/pg-int8-1.0.1/LICENSE)
- * picocolors@1.1.1 (licenses/picocolors-1.1.1/LICENSE)
- * potpack@1.0.2 (licenses/potpack-1.0.2/LICENSE)
- * semver@7.8.5 (licenses/semver-7.8.5/LICENSE)
- * setprototypeof@1.2.0 (licenses/setprototypeof-1.2.0/LICENSE)
- * split2@4.2.0 (licenses/split2-4.2.0/LICENSE)
+ * d3@7.9.0
+ * d3-array@3.2.4
+ * d3-axis@3.0.0
+ * d3-brush@3.0.0
+ * d3-chord@3.0.1
+ * d3-color@3.1.0
+ * d3-contour@4.0.2
+ * d3-delaunay@6.0.4
+ * d3-dispatch@3.0.1
+ * d3-drag@3.0.0
+ * d3-dsv@3.0.1
+ * d3-fetch@3.0.1
+ * d3-force@3.0.0
+ * d3-format@3.1.2
+ * d3-geo@3.1.1
+ * d3-hierarchy@3.1.2
+ * d3-interpolate@3.0.1
+ * d3-path@3.1.0
+ * d3-polygon@3.0.1
+ * d3-quadtree@3.0.1
+ * d3-random@3.0.1
+ * d3-scale@4.0.2
+ * d3-scale-chromatic@3.1.0
+ * d3-selection@3.0.0
+ * d3-shape@3.2.0
+ * d3-time@3.1.0
+ * d3-time-format@4.1.0
+ * d3-timer@3.0.1
+ * d3-transition@3.0.1
+ * d3-zoom@3.0.0
+ * delaunator@5.1.0
+ * fastq@1.20.1
+ * inherits@2.0.4
+ * internmap@2.0.3
+ * isexe@2.0.0
+ * once@1.4.0
+ * pg-int8@1.0.1
+ * picocolors@1.1.1
+ * potpack@1.0.2
+ * semver@7.8.5
+ * setprototypeof@1.2.0
+ * split2@4.2.0
* strict-event-emitter-types@2.0.0
- * which@2.0.2 (licenses/which-2.0.2/LICENSE)
- * wrappy@1.0.2 (licenses/wrappy-1.0.2/LICENSE)
- * yaml@2.9.0 (licenses/yaml-2.9.0/LICENSE)
- * zod-to-json-schema@3.25.2 (licenses/zod-to-json-schema-3.25.2/LICENSE)
+ * which@2.0.2
+ * wrappy@1.0.2
+ * yaml@2.9.0
+ * zod-to-json-schema@3.25.2
--- MIT ---
- * @babel/helper-string-parser@7.29.7 (licenses/@babel__helper-string-parser-7.29.7/LICENSE)
- * @babel/helper-validator-identifier@7.29.7 (licenses/@babel__helper-validator-identifier-7.29.7/LICENSE)
- * @babel/parser@7.29.7 (licenses/@babel__parser-7.29.7/LICENSE)
- * @babel/types@7.29.7 (licenses/@babel__types-7.29.7/LICENSE)
+ * @babel/helper-string-parser@7.29.7
+ * @babel/helper-validator-identifier@7.29.7
+ * @babel/parser@7.29.7
+ * @babel/types@7.29.7
* @cfworker/json-schema@4.1.1
- * @fastify/accept-negotiator@2.0.1 (licenses/@fastify__accept-negotiator-2.0.1/LICENSE)
- * @fastify/ajv-compiler@4.0.5 (licenses/@fastify__ajv-compiler-4.0.5/LICENSE)
- * @fastify/busboy@3.2.0 (licenses/@fastify__busboy-3.2.0/LICENSE)
- * @fastify/cookie@11.1.2 (licenses/@fastify__cookie-11.1.2/LICENSE)
- * @fastify/deepmerge@3.2.1 (licenses/@fastify__deepmerge-3.2.1/LICENSE)
- * @fastify/error@4.2.0 (licenses/@fastify__error-4.2.0/LICENSE)
- * @fastify/fast-json-stringify-compiler@5.1.0 (licenses/@fastify__fast-json-stringify-compiler-5.1.0/LICENSE)
- * @fastify/forwarded@3.0.2 (licenses/@fastify__forwarded-3.0.2/LICENSE)
- * @fastify/merge-json-schemas@0.2.1 (licenses/@fastify__merge-json-schemas-0.2.1/LICENSE)
- * @fastify/multipart@10.1.0 (licenses/@fastify__multipart-10.1.0/LICENSE)
- * @fastify/proxy-addr@5.1.0 (licenses/@fastify__proxy-addr-5.1.0/LICENSE)
- * @fastify/send@4.1.0 (licenses/@fastify__send-4.1.0/LICENSE)
- * @fastify/static@10.1.2 (licenses/@fastify__static-10.1.2/LICENSE)
- * @hono/node-server@2.1.1 (licenses/@hono__node-server-2.1.1/LICENSE)
- * @intlify/core-base@10.0.8 (licenses/@intlify__core-base-10.0.8/LICENSE)
- * @intlify/message-compiler@10.0.8 (licenses/@intlify__message-compiler-10.0.8/LICENSE)
- * @intlify/shared@10.0.8 (licenses/@intlify__shared-10.0.8/LICENSE)
- * @jridgewell/resolve-uri@3.1.2 (licenses/@jridgewell__resolve-uri-3.1.2/LICENSE)
- * @jridgewell/sourcemap-codec@1.5.5 (licenses/@jridgewell__sourcemap-codec-1.5.5/LICENSE)
- * @jridgewell/trace-mapping@0.3.31 (licenses/@jridgewell__trace-mapping-0.3.31/LICENSE)
- * @langchain/aws@1.4.3 (licenses/@langchain__aws-1.4.3/LICENSE)
- * @langchain/core@1.2.4 (licenses/@langchain__core-1.2.4/LICENSE)
- * @langchain/langgraph@1.4.8 (licenses/@langchain__langgraph-1.4.8/LICENSE)
- * @langchain/langgraph-checkpoint@1.1.3 (licenses/@langchain__langgraph-checkpoint-1.1.3/LICENSE)
- * @langchain/langgraph-sdk@1.9.28 (licenses/@langchain__langgraph-sdk-1.9.28/LICENSE)
- * @langchain/openai@1.5.5 (licenses/@langchain__openai-1.5.5/LICENSE)
- * @langchain/protocol@0.0.18 (licenses/@langchain__protocol-0.0.18/LICENSE)
- * @lukeed/ms@2.0.2 (licenses/@lukeed__ms-2.0.2/license)
- * @modelcontextprotocol/sdk@1.30.0 (licenses/@modelcontextprotocol__sdk-1.30.0/LICENSE)
- * @phc/format@1.0.0 (licenses/@phc__format-1.0.0/license)
- * @pinojs/redact@0.4.0 (licenses/@pinojs__redact-0.4.0/LICENSE)
- * @pmndrs/pointer-events@6.6.30 (licenses/@pmndrs__pointer-events-6.6.30/LICENSE)
- * @standard-schema/spec@1.1.0 (licenses/@standard-schema__spec-1.1.0/LICENSE)
- * @tanstack/match-sorter-utils@8.19.4 (licenses/@tanstack__match-sorter-utils-8.19.4/LICENSE)
- * @tanstack/query-core@5.101.4 (licenses/@tanstack__query-core-5.101.4/LICENSE)
- * @tanstack/vue-query@5.101.4 (licenses/@tanstack__vue-query-5.101.4/LICENSE)
- * @tresjs/cientos@5.8.1 (licenses/@tresjs__cientos-5.8.1/LICENSE)
- * @tresjs/core@5.8.3 (licenses/@tresjs__core-5.8.3/LICENSE)
- * @types/draco3d@1.4.10 (licenses/@types__draco3d-1.4.10/LICENSE)
- * @types/json-schema@7.0.15 (licenses/@types__json-schema-7.0.15/LICENSE)
- * @types/offscreencanvas@2019.7.3 (licenses/@types__offscreencanvas-2019.7.3/LICENSE)
- * @types/trusted-types@2.0.7 (licenses/@types__trusted-types-2.0.7/LICENSE)
- * @types/web-bluetooth@0.0.21 (licenses/@types__web-bluetooth-0.0.21/LICENSE)
- * @types/webxr@0.5.24 (licenses/@types__webxr-0.5.24/LICENSE)
- * @vue/compiler-core@3.5.40 (licenses/@vue__compiler-core-3.5.40/LICENSE)
- * @vue/compiler-dom@3.5.40 (licenses/@vue__compiler-dom-3.5.40/LICENSE)
- * @vue/compiler-sfc@3.5.40 (licenses/@vue__compiler-sfc-3.5.40/LICENSE)
- * @vue/compiler-ssr@3.5.40 (licenses/@vue__compiler-ssr-3.5.40/LICENSE)
+ * @fastify/accept-negotiator@2.0.1
+ * @fastify/ajv-compiler@4.0.5
+ * @fastify/busboy@3.2.0
+ * @fastify/cookie@11.1.2
+ * @fastify/deepmerge@3.2.1
+ * @fastify/error@4.2.0
+ * @fastify/fast-json-stringify-compiler@5.1.0
+ * @fastify/forwarded@3.0.2
+ * @fastify/merge-json-schemas@0.2.1
+ * @fastify/multipart@10.1.0
+ * @fastify/proxy-addr@5.1.0
+ * @fastify/send@4.1.0
+ * @fastify/static@10.1.2
+ * @hono/node-server@2.1.1
+ * @intlify/core-base@10.0.8
+ * @intlify/message-compiler@10.0.8
+ * @intlify/shared@10.0.8
+ * @jridgewell/resolve-uri@3.1.2
+ * @jridgewell/sourcemap-codec@1.5.5
+ * @jridgewell/trace-mapping@0.3.31
+ * @langchain/aws@1.4.3
+ * @langchain/core@1.2.4
+ * @langchain/langgraph@1.4.8
+ * @langchain/langgraph-checkpoint@1.1.3
+ * @langchain/langgraph-sdk@1.9.28
+ * @langchain/openai@1.5.5
+ * @langchain/protocol@0.0.18
+ * @lukeed/ms@2.0.2
+ * @modelcontextprotocol/sdk@1.30.0
+ * @phc/format@1.0.0
+ * @pinojs/redact@0.4.0
+ * @pmndrs/pointer-events@6.6.30
+ * @standard-schema/spec@1.1.0
+ * @tanstack/match-sorter-utils@8.19.4
+ * @tanstack/query-core@5.101.4
+ * @tanstack/vue-query@5.101.4
+ * @tresjs/cientos@5.8.1
+ * @tresjs/core@5.8.3
+ * @types/draco3d@1.4.10
+ * @types/json-schema@7.0.15
+ * @types/offscreencanvas@2019.7.3
+ * @types/trusted-types@2.0.7
+ * @types/web-bluetooth@0.0.21
+ * @types/webxr@0.5.24
+ * @vue/compiler-core@3.5.40
+ * @vue/compiler-dom@3.5.40
+ * @vue/compiler-sfc@3.5.40
+ * @vue/compiler-ssr@3.5.40
* @vue/devtools-api@6.6.4
- * @vue/devtools-api@8.2.1 (licenses/@vue__devtools-api-8.2.1/LICENSE)
- * @vue/devtools-kit@8.2.1 (licenses/@vue__devtools-kit-8.2.1/LICENSE)
- * @vue/devtools-shared@8.2.1 (licenses/@vue__devtools-shared-8.2.1/LICENSE)
- * @vue/reactivity@3.5.40 (licenses/@vue__reactivity-3.5.40/LICENSE)
- * @vue/runtime-core@3.5.40 (licenses/@vue__runtime-core-3.5.40/LICENSE)
- * @vue/runtime-dom@3.5.40 (licenses/@vue__runtime-dom-3.5.40/LICENSE)
- * @vue/server-renderer@3.5.40 (licenses/@vue__server-renderer-3.5.40/LICENSE)
- * @vue/shared@3.5.40 (licenses/@vue__shared-3.5.40/LICENSE)
- * @vueuse/core@14.4.0 (licenses/@vueuse__core-14.4.0/LICENSE)
- * @vueuse/metadata@14.4.0 (licenses/@vueuse__metadata-14.4.0/LICENSE)
- * @vueuse/shared@14.4.0 (licenses/@vueuse__shared-14.4.0/LICENSE)
- * abort-controller@3.0.0 (licenses/abort-controller-3.0.0/LICENSE)
+ * @vue/devtools-api@8.2.1
+ * @vue/devtools-kit@8.2.1
+ * @vue/devtools-shared@8.2.1
+ * @vue/reactivity@3.5.40
+ * @vue/runtime-core@3.5.40
+ * @vue/runtime-dom@3.5.40
+ * @vue/server-renderer@3.5.40
+ * @vue/shared@3.5.40
+ * @vueuse/core@14.4.0
+ * @vueuse/metadata@14.4.0
+ * @vueuse/shared@14.4.0
+ * abort-controller@3.0.0
* abstract-logging@2.0.1
- * accepts@2.0.0 (licenses/accepts-2.0.0/LICENSE)
- * ajv@8.20.0 (licenses/ajv-8.20.0/LICENSE)
- * ajv-formats@3.0.1 (licenses/ajv-formats-3.0.1/LICENSE)
- * argon2@0.41.1 (licenses/argon2-0.41.1/LICENSE)
- * atomic-sleep@1.0.0 (licenses/atomic-sleep-1.0.0/LICENSE)
- * avvio@9.3.0 (licenses/avvio-9.3.0/LICENSE)
- * balanced-match@4.0.4 (licenses/balanced-match-4.0.4/LICENSE.md)
- * base64-js@1.5.1 (licenses/base64-js-1.5.1/LICENSE)
- * birpc@2.9.0 (licenses/birpc-2.9.0/LICENSE)
- * body-parser@2.3.0 (licenses/body-parser-2.3.0/LICENSE)
- * bowser@2.14.1 (licenses/bowser-2.14.1/LICENSE)
- * brace-expansion@5.0.9 (licenses/brace-expansion-5.0.9/LICENSE)
- * buffer@6.0.3 (licenses/buffer-6.0.3/LICENSE)
- * bytes@3.1.2 (licenses/bytes-3.1.2/LICENSE)
- * call-bind-apply-helpers@1.0.2 (licenses/call-bind-apply-helpers-1.0.2/LICENSE)
- * call-bound@1.0.4 (licenses/call-bound-1.0.4/LICENSE)
- * camera-controls@3.1.2 (licenses/camera-controls-3.1.2/LICENSE)
- * chokidar@4.0.3 (licenses/chokidar-4.0.3/LICENSE)
- * colorette@2.0.20 (licenses/colorette-2.0.20/LICENSE.md)
- * commander@7.2.0 (licenses/commander-7.2.0/LICENSE)
- * content-disposition@1.1.0 (licenses/content-disposition-1.1.0/LICENSE)
- * content-disposition@2.0.1 (licenses/content-disposition-2.0.1/LICENSE)
- * content-type@1.0.5 (licenses/content-type-1.0.5/LICENSE)
- * content-type@2.1.0 (licenses/content-type-2.1.0/LICENSE)
- * cookie@0.7.2 (licenses/cookie-0.7.2/LICENSE)
- * cookie@1.1.1 (licenses/cookie-1.1.1/LICENSE)
- * cookie@2.0.1 (licenses/cookie-2.0.1/LICENSE)
- * cookie-signature@1.2.2 (licenses/cookie-signature-1.2.2/LICENSE)
- * cors@2.8.6 (licenses/cors-2.8.6/LICENSE)
- * cross-spawn@7.0.6 (licenses/cross-spawn-7.0.6/LICENSE)
- * csstype@3.2.3 (licenses/csstype-3.2.3/LICENSE)
- * dateformat@4.6.3 (licenses/dateformat-4.6.3/LICENSE)
- * debug@4.4.3 (licenses/debug-4.4.3/LICENSE)
- * depd@2.0.0 (licenses/depd-2.0.0/LICENSE)
- * dequal@2.0.3 (licenses/dequal-2.0.3/license)
- * dunder-proto@1.0.1 (licenses/dunder-proto-1.0.1/LICENSE)
- * ee-first@1.1.1 (licenses/ee-first-1.1.1/LICENSE)
- * encodeurl@2.0.0 (licenses/encodeurl-2.0.0/LICENSE)
- * end-of-stream@1.4.5 (licenses/end-of-stream-1.4.5/LICENSE)
- * es-define-property@1.0.1 (licenses/es-define-property-1.0.1/LICENSE)
- * es-errors@1.3.0 (licenses/es-errors-1.3.0/LICENSE)
- * es-object-atoms@1.1.2 (licenses/es-object-atoms-1.1.2/LICENSE)
- * escape-html@1.0.3 (licenses/escape-html-1.0.3/LICENSE)
- * estree-walker@2.0.2 (licenses/estree-walker-2.0.2/LICENSE)
- * etag@1.8.1 (licenses/etag-1.8.1/LICENSE)
- * event-target-shim@5.0.1 (licenses/event-target-shim-5.0.1/LICENSE)
- * eventemitter3@4.0.7 (licenses/eventemitter3-4.0.7/LICENSE)
- * eventemitter3@5.0.4 (licenses/eventemitter3-5.0.4/LICENSE)
- * events@3.3.0 (licenses/events-3.3.0/LICENSE)
- * eventsource@3.0.7 (licenses/eventsource-3.0.7/LICENSE)
- * eventsource-parser@3.1.1 (licenses/eventsource-parser-3.1.1/LICENSE)
- * express@5.2.1 (licenses/express-5.2.1/LICENSE)
- * express-rate-limit@8.6.2 (licenses/express-rate-limit-8.6.2/license.md)
- * fast-copy@3.0.2 (licenses/fast-copy-3.0.2/LICENSE)
- * fast-decode-uri-component@1.0.1 (licenses/fast-decode-uri-component-1.0.1/LICENSE)
- * fast-deep-equal@3.1.3 (licenses/fast-deep-equal-3.1.3/LICENSE)
- * fast-json-stringify@7.0.1 (licenses/fast-json-stringify-7.0.1/LICENSE)
- * fast-querystring@1.1.2 (licenses/fast-querystring-1.1.2/LICENSE)
- * fast-safe-stringify@2.1.1 (licenses/fast-safe-stringify-2.1.1/LICENSE)
- * fastify@5.11.0 (licenses/fastify-5.11.0/LICENSE)
- * fastify-plugin@6.0.0 (licenses/fastify-plugin-6.0.0/LICENSE)
- * fflate@0.6.11 (licenses/fflate-0.6.11/LICENSE)
- * finalhandler@2.1.1 (licenses/finalhandler-2.1.1/LICENSE)
- * find-my-way@9.7.0 (licenses/find-my-way-9.7.0/LICENSE)
- * forwarded@0.2.0 (licenses/forwarded-0.2.0/LICENSE)
- * fresh@2.0.0 (licenses/fresh-2.0.0/LICENSE)
- * function-bind@1.1.2 (licenses/function-bind-1.1.2/LICENSE)
- * get-intrinsic@1.3.0 (licenses/get-intrinsic-1.3.0/LICENSE)
- * get-proto@1.0.1 (licenses/get-proto-1.0.1/LICENSE)
- * gopd@1.2.0 (licenses/gopd-1.2.0/LICENSE)
- * has-symbols@1.1.0 (licenses/has-symbols-1.1.0/LICENSE)
- * hasown@2.0.4 (licenses/hasown-2.0.4/LICENSE)
- * help-me@5.0.0 (licenses/help-me-5.0.0/LICENSE)
- * hono@4.13.2 (licenses/hono-4.13.2/LICENSE)
- * hookable@5.5.3 (licenses/hookable-5.5.3/LICENSE.md)
- * http-errors@2.0.1 (licenses/http-errors-2.0.1/LICENSE)
- * iconv-lite@0.6.3 (licenses/iconv-lite-0.6.3/LICENSE)
- * iconv-lite@0.7.3 (licenses/iconv-lite-0.7.3/LICENSE)
- * ip-address@10.5.0 (licenses/ip-address-10.5.0/LICENSE)
- * ipaddr.js@1.9.1 (licenses/ipaddr.js-1.9.1/LICENSE)
- * ipaddr.js@2.4.0 (licenses/ipaddr.js-2.4.0/LICENSE)
- * is-network-error@1.3.2 (licenses/is-network-error-1.3.2/license)
- * is-promise@4.0.0 (licenses/is-promise-4.0.0/LICENSE)
- * jose@6.2.9 (licenses/jose-6.2.9/LICENSE.md)
- * joycon@3.1.1 (licenses/joycon-3.1.1/LICENSE)
+ * accepts@2.0.0
+ * ajv@8.20.0
+ * ajv-formats@3.0.1
+ * argon2@0.41.1
+ * atomic-sleep@1.0.0
+ * avvio@9.3.0
+ * balanced-match@4.0.4
+ * base64-js@1.5.1
+ * birpc@2.9.0
+ * body-parser@2.3.0
+ * bowser@2.14.1
+ * brace-expansion@5.0.9
+ * buffer@6.0.3
+ * bytes@3.1.2
+ * call-bind-apply-helpers@1.0.2
+ * call-bound@1.0.4
+ * camera-controls@3.1.2
+ * chokidar@4.0.3
+ * colorette@2.0.20
+ * commander@7.2.0
+ * content-disposition@1.1.0
+ * content-disposition@2.0.1
+ * content-type@1.0.5
+ * content-type@2.1.0
+ * cookie@0.7.2
+ * cookie@1.1.1
+ * cookie@2.0.1
+ * cookie-signature@1.2.2
+ * cors@2.8.6
+ * cross-spawn@7.0.6
+ * csstype@3.2.3
+ * dateformat@4.6.3
+ * debug@4.4.3
+ * depd@2.0.0
+ * dequal@2.0.3
+ * dunder-proto@1.0.1
+ * ee-first@1.1.1
+ * encodeurl@2.0.0
+ * end-of-stream@1.4.5
+ * es-define-property@1.0.1
+ * es-errors@1.3.0
+ * es-object-atoms@1.1.2
+ * escape-html@1.0.3
+ * estree-walker@2.0.2
+ * etag@1.8.1
+ * event-target-shim@5.0.1
+ * eventemitter3@4.0.7
+ * eventemitter3@5.0.4
+ * events@3.3.0
+ * eventsource@3.0.7
+ * eventsource-parser@3.1.1
+ * express@5.2.1
+ * express-rate-limit@8.6.2
+ * fast-copy@3.0.2
+ * fast-decode-uri-component@1.0.1
+ * fast-deep-equal@3.1.3
+ * fast-json-stringify@7.0.1
+ * fast-querystring@1.1.2
+ * fast-safe-stringify@2.1.1
+ * fastify@5.11.0
+ * fastify-plugin@6.0.0
+ * fflate@0.6.11
+ * finalhandler@2.1.1
+ * find-my-way@9.7.0
+ * forwarded@0.2.0
+ * fresh@2.0.0
+ * function-bind@1.1.2
+ * get-intrinsic@1.3.0
+ * get-proto@1.0.1
+ * gopd@1.2.0
+ * has-symbols@1.1.0
+ * hasown@2.0.4
+ * help-me@5.0.0
+ * hono@4.13.2
+ * hookable@5.5.3
+ * http-errors@2.0.1
+ * iconv-lite@0.6.3
+ * iconv-lite@0.7.3
+ * ip-address@10.5.0
+ * ipaddr.js@1.9.1
+ * ipaddr.js@2.4.0
+ * is-network-error@1.3.2
+ * is-promise@4.0.0
+ * jose@6.2.9
+ * joycon@3.1.1
* js-tiktoken@1.0.21
- * json-schema-ref-resolver@3.0.0 (licenses/json-schema-ref-resolver-3.0.0/LICENSE)
- * json-schema-traverse@1.0.0 (licenses/json-schema-traverse-1.0.0/LICENSE)
+ * json-schema-ref-resolver@3.0.0
+ * json-schema-traverse@1.0.0
* langsmith@0.8.8
- * ldapts@8.2.0 (licenses/ldapts-8.2.0/LICENSE)
- * magic-string@0.30.21 (licenses/magic-string-0.30.21/LICENSE)
- * marked@14.0.0 (licenses/marked-14.0.0/LICENSE.md)
- * math-intrinsics@1.1.0 (licenses/math-intrinsics-1.1.0/LICENSE)
- * media-typer@1.1.1 (licenses/media-typer-1.1.1/LICENSE)
- * merge-descriptors@2.0.0 (licenses/merge-descriptors-2.0.0/license)
- * mime@3.0.0 (licenses/mime-3.0.0/LICENSE)
- * mime-db@1.54.0 (licenses/mime-db-1.54.0/LICENSE)
- * mime-types@3.0.2 (licenses/mime-types-3.0.2/LICENSE)
- * minimist@1.2.8 (licenses/minimist-1.2.8/LICENSE)
- * monaco-editor@0.55.1 (licenses/monaco-editor-0.55.1/LICENSE)
- * ms@2.1.3 (licenses/ms-2.1.3/license.md)
- * mustache@4.2.0 (licenses/mustache-4.2.0/LICENSE)
- * nanoid@3.3.18 (licenses/nanoid-3.3.18/LICENSE)
- * negotiator@1.0.0 (licenses/negotiator-1.0.0/LICENSE)
- * node-addon-api@8.9.0 (licenses/node-addon-api-8.9.0/LICENSE.md)
- * node-gyp-build@4.8.4 (licenses/node-gyp-build-4.8.4/LICENSE)
- * object-assign@4.1.1 (licenses/object-assign-4.1.1/license)
- * object-inspect@1.13.4 (licenses/object-inspect-1.13.4/LICENSE)
- * on-exit-leak-free@2.1.2 (licenses/on-exit-leak-free-2.1.2/LICENSE)
- * on-finished@2.4.1 (licenses/on-finished-2.4.1/LICENSE)
- * p-finally@1.0.0 (licenses/p-finally-1.0.0/license)
- * p-queue@6.6.2 (licenses/p-queue-6.6.2/license)
- * p-queue@9.3.3 (licenses/p-queue-9.3.3/license)
- * p-retry@7.1.1 (licenses/p-retry-7.1.1/license)
- * p-timeout@3.2.0 (licenses/p-timeout-3.2.0/license)
- * p-timeout@7.0.1 (licenses/p-timeout-7.0.1/license)
- * parseurl@1.3.3 (licenses/parseurl-1.3.3/LICENSE)
- * path-key@3.1.1 (licenses/path-key-3.1.1/license)
- * path-to-regexp@8.4.2 (licenses/path-to-regexp-8.4.2/LICENSE)
- * perfect-debounce@2.1.0 (licenses/perfect-debounce-2.1.0/LICENSE)
- * pg@8.23.0 (licenses/pg-8.23.0/LICENSE)
- * pg-cloudflare@1.4.0 (licenses/pg-cloudflare-1.4.0/LICENSE)
- * pg-connection-string@2.14.0 (licenses/pg-connection-string-2.14.0/LICENSE)
- * pg-pool@3.14.0 (licenses/pg-pool-3.14.0/LICENSE)
- * pg-protocol@1.16.0 (licenses/pg-protocol-1.16.0/LICENSE)
+ * ldapts@8.2.0
+ * magic-string@0.30.21
+ * marked@14.0.0
+ * math-intrinsics@1.1.0
+ * media-typer@1.1.1
+ * merge-descriptors@2.0.0
+ * mime@3.0.0
+ * mime-db@1.54.0
+ * mime-types@3.0.2
+ * minimist@1.2.8
+ * monaco-editor@0.55.1
+ * ms@2.1.3
+ * mustache@4.2.0
+ * nanoid@3.3.18
+ * negotiator@1.0.0
+ * node-addon-api@8.9.0
+ * node-gyp-build@4.8.4
+ * object-assign@4.1.1
+ * object-inspect@1.13.4
+ * on-exit-leak-free@2.1.2
+ * on-finished@2.4.1
+ * p-finally@1.0.0
+ * p-queue@6.6.2
+ * p-queue@9.3.3
+ * p-retry@7.1.1
+ * p-timeout@3.2.0
+ * p-timeout@7.0.1
+ * parseurl@1.3.3
+ * path-key@3.1.1
+ * path-to-regexp@8.4.2
+ * perfect-debounce@2.1.0
+ * pg@8.23.0
+ * pg-cloudflare@1.4.0
+ * pg-connection-string@2.14.0
+ * pg-pool@3.14.0
+ * pg-protocol@1.16.0
* pg-types@2.2.0
* pgpass@1.0.5
- * pinia@2.3.1 (licenses/pinia-2.3.1/LICENSE)
- * pino@9.14.0 (licenses/pino-9.14.0/LICENSE)
- * pino-abstract-transport@2.0.0 (licenses/pino-abstract-transport-2.0.0/LICENSE)
- * pino-pretty@11.3.0 (licenses/pino-pretty-11.3.0/LICENSE)
- * pino-std-serializers@7.1.0 (licenses/pino-std-serializers-7.1.0/LICENSE)
- * pkce-challenge@5.0.1 (licenses/pkce-challenge-5.0.1/LICENSE)
- * postcss@8.5.25 (licenses/postcss-8.5.25/LICENSE)
- * postgres-array@2.0.0 (licenses/postgres-array-2.0.0/license)
- * postgres-bytea@1.0.1 (licenses/postgres-bytea-1.0.1/license)
- * postgres-date@1.0.7 (licenses/postgres-date-1.0.7/license)
- * postgres-interval@1.2.0 (licenses/postgres-interval-1.2.0/license)
- * process@0.11.10 (licenses/process-0.11.10/LICENSE)
- * process-warning@4.0.1 (licenses/process-warning-4.0.1/LICENSE)
- * process-warning@5.1.0 (licenses/process-warning-5.1.0/LICENSE)
- * proxy-addr@2.0.7 (licenses/proxy-addr-2.0.7/LICENSE)
- * pump@3.0.4 (licenses/pump-3.0.4/LICENSE)
- * quick-format-unescaped@4.0.4 (licenses/quick-format-unescaped-4.0.4/LICENSE)
- * radashi@12.9.1 (licenses/radashi-12.9.1/LICENSE.md)
- * range-parser@1.3.0 (licenses/range-parser-1.3.0/LICENSE)
- * raw-body@3.0.2 (licenses/raw-body-3.0.2/LICENSE)
- * readable-stream@4.7.0 (licenses/readable-stream-4.7.0/LICENSE)
- * readdirp@4.1.2 (licenses/readdirp-4.1.2/LICENSE)
- * real-require@0.2.0 (licenses/real-require-0.2.0/LICENSE.md)
- * remove-accents@0.5.0 (licenses/remove-accents-0.5.0/LICENSE)
- * require-from-string@2.0.2 (licenses/require-from-string-2.0.2/license)
- * ret@0.5.0 (licenses/ret-0.5.0/LICENSE)
- * reusify@1.1.0 (licenses/reusify-1.1.0/LICENSE)
- * rfdc@1.4.1 (licenses/rfdc-1.4.1/LICENSE)
- * router@2.2.0 (licenses/router-2.2.0/LICENSE)
- * safe-buffer@5.2.1 (licenses/safe-buffer-5.2.1/LICENSE)
- * safe-regex2@5.1.1 (licenses/safe-regex2-5.1.1/LICENSE)
- * safe-stable-stringify@2.5.0 (licenses/safe-stable-stringify-2.5.0/LICENSE)
- * safer-buffer@2.1.2 (licenses/safer-buffer-2.1.2/LICENSE)
- * send@1.2.1 (licenses/send-1.2.1/LICENSE)
- * serve-static@2.2.1 (licenses/serve-static-2.2.1/LICENSE)
- * set-cookie-parser@2.7.2 (licenses/set-cookie-parser-2.7.2/LICENSE)
- * shebang-command@2.0.0 (licenses/shebang-command-2.0.0/license)
- * shebang-regex@3.0.0 (licenses/shebang-regex-3.0.0/license)
- * side-channel@1.1.1 (licenses/side-channel-1.1.1/LICENSE)
- * side-channel-list@1.0.1 (licenses/side-channel-list-1.0.1/LICENSE)
- * side-channel-map@1.0.1 (licenses/side-channel-map-1.0.1/LICENSE)
- * side-channel-weakmap@1.0.2 (licenses/side-channel-weakmap-1.0.2/LICENSE)
- * sonic-boom@4.2.1 (licenses/sonic-boom-4.2.1/LICENSE)
- * stacktrace-parser@0.1.11 (licenses/stacktrace-parser-0.1.11/LICENSE)
+ * pinia@2.3.1
+ * pino@9.14.0
+ * pino-abstract-transport@2.0.0
+ * pino-pretty@11.3.0
+ * pino-std-serializers@7.1.0
+ * pkce-challenge@5.0.1
+ * postcss@8.5.25
+ * postgres-array@2.0.0
+ * postgres-bytea@1.0.1
+ * postgres-date@1.0.7
+ * postgres-interval@1.2.0
+ * process@0.11.10
+ * process-warning@4.0.1
+ * process-warning@5.1.0
+ * proxy-addr@2.0.7
+ * pump@3.0.4
+ * quick-format-unescaped@4.0.4
+ * radashi@12.9.1
+ * range-parser@1.3.0
+ * raw-body@3.0.2
+ * readable-stream@4.7.0
+ * readdirp@4.1.2
+ * real-require@0.2.0
+ * remove-accents@0.5.0
+ * require-from-string@2.0.2
+ * ret@0.5.0
+ * reusify@1.1.0
+ * rfdc@1.4.1
+ * router@2.2.0
+ * safe-buffer@5.2.1
+ * safe-regex2@5.1.1
+ * safe-stable-stringify@2.5.0
+ * safer-buffer@2.1.2
+ * send@1.2.1
+ * serve-static@2.2.1
+ * set-cookie-parser@2.7.2
+ * shebang-command@2.0.0
+ * shebang-regex@3.0.0
+ * side-channel@1.1.1
+ * side-channel-list@1.0.1
+ * side-channel-map@1.0.1
+ * side-channel-weakmap@1.0.2
+ * sonic-boom@4.2.1
+ * stacktrace-parser@0.1.11
* stats-gl@4.2.3
- * stats.js@0.17.0 (licenses/stats.js-0.17.0/LICENSE)
- * statuses@2.0.2 (licenses/statuses-2.0.2/LICENSE)
- * string_decoder@1.3.0 (licenses/string_decoder-1.3.0/LICENSE)
- * strip-json-comments@3.1.1 (licenses/strip-json-comments-3.1.1/license)
- * thread-stream@3.2.0 (licenses/thread-stream-3.2.0/LICENSE)
- * three@0.184.0 (licenses/three-0.184.0/LICENSE)
- * three-custom-shader-material@6.4.0 (licenses/three-custom-shader-material-6.4.0/LICENSE.md)
- * three-mesh-bvh@0.9.13 (licenses/three-mesh-bvh-0.9.13/LICENSE)
- * three-stdlib@2.36.1 (licenses/three-stdlib-2.36.1/LICENSE)
- * toad-cache@3.7.4 (licenses/toad-cache-3.7.4/LICENSE)
- * toidentifier@1.0.1 (licenses/toidentifier-1.0.1/LICENSE)
- * type-is@2.1.0 (licenses/type-is-2.1.0/LICENSE)
- * unpipe@1.0.0 (licenses/unpipe-1.0.0/LICENSE)
- * vary@1.1.2 (licenses/vary-1.1.2/LICENSE)
- * vue@3.5.40 (licenses/vue-3.5.40/LICENSE)
- * vue-demi@0.14.10 (licenses/vue-demi-0.14.10/LICENSE)
- * vue-i18n@10.0.8 (licenses/vue-i18n-10.0.8/LICENSE)
- * vue-router@4.6.4 (licenses/vue-router-4.6.4/LICENSE)
- * ws@8.21.1 (licenses/ws-8.21.1/LICENSE)
- * xtend@4.0.2 (licenses/xtend-4.0.2/LICENSE)
- * zod@3.25.76 (licenses/zod-3.25.76/LICENSE)
+ * stats.js@0.17.0
+ * statuses@2.0.2
+ * string_decoder@1.3.0
+ * strip-json-comments@3.1.1
+ * thread-stream@3.2.0
+ * three@0.184.0
+ * three-custom-shader-material@6.4.0
+ * three-mesh-bvh@0.9.13
+ * three-stdlib@2.36.1
+ * toad-cache@3.7.4
+ * toidentifier@1.0.1
+ * type-is@2.1.0
+ * unpipe@1.0.0
+ * vary@1.1.2
+ * vue@3.5.40
+ * vue-demi@0.14.10
+ * vue-i18n@10.0.8
+ * vue-router@4.6.4
+ * ws@8.21.1
+ * xtend@4.0.2
+ * zod@3.25.76
--- OFL-1.1 ---
- * @fontsource-variable/inter@5.3.0 (licenses/@fontsource-variable__inter-5.3.0/LICENSE)
- * @fontsource-variable/jetbrains-mono@5.3.0 (licenses/@fontsource-variable__jetbrains-mono-5.3.0/LICENSE)
+ * @fontsource-variable/inter@5.3.0
+ * @fontsource-variable/jetbrains-mono@5.3.0
--- Unlicense ---
- * robust-predicates@3.0.3 (licenses/robust-predicates-3.0.3/LICENSE)
+ * robust-predicates@3.0.3
+
diff --git a/dist-material/release-docs/LICENSE.tpl b/dist-material/release-docs/LICENSE.tpl
index 7b18cfcb..8f56e92d 100644
--- a/dist-material/release-docs/LICENSE.tpl
+++ b/dist-material/release-docs/LICENSE.tpl
@@ -1,205 +1,4 @@
- Apache License
- Version 2.0, January 2004
- http://www.apache.org/licenses/
-
- TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
- 1. Definitions.
-
- "License" shall mean the terms and conditions for use, reproduction,
- and distribution as defined by Sections 1 through 9 of this document.
-
- "Licensor" shall mean the copyright owner or entity authorized by
- the copyright owner that is granting the License.
-
- "Legal Entity" shall mean the union of the acting entity and all
- other entities that control, are controlled by, or are under common
- control with that entity. For the purposes of this definition,
- "control" means (i) the power, direct or indirect, to cause the
- direction or management of such entity, whether by contract or
- otherwise, or (ii) ownership of fifty percent (50%) or more of the
- outstanding shares, or (iii) beneficial ownership of such entity.
-
- "You" (or "Your") shall mean an individual or Legal Entity
- exercising permissions granted by this License.
-
- "Source" form shall mean the preferred form for making modifications,
- including but not limited to software source code, documentation
- source, and configuration files.
-
- "Object" form shall mean any form resulting from mechanical
- transformation or translation of a Source form, including but
- not limited to compiled object code, generated documentation,
- and conversions to other media types.
-
- "Work" shall mean the work of authorship, whether in Source or
- Object form, made available under the License, as indicated by a
- copyright notice that is included in or attached to the work
- (an example is provided in the Appendix below).
-
- "Derivative Works" shall mean any work, whether in Source or Object
- form, that is based on (or derived from) the Work and for which the
- editorial revisions, annotations, elaborations, or other modifications
- represent, as a whole, an original work of authorship. For the purposes
- of this License, Derivative Works shall not include works that remain
- separable from, or merely link (or bind by name) to the interfaces of,
- the Work and Derivative Works thereof.
-
- "Contribution" shall mean any work of authorship, including
- the original version of the Work and any modifications or additions
- to that Work or Derivative Works thereof, that is intentionally
- submitted to Licensor for inclusion in the Work by the copyright owner
- or by an individual or Legal Entity authorized to submit on behalf of
- the copyright owner. For the purposes of this definition, "submitted"
- means any form of electronic, verbal, or written communication sent
- to the Licensor or its representatives, including but not limited to
- communication on electronic mailing lists, source code control systems,
- and issue tracking systems that are managed by, or on behalf of, the
- Licensor for the purpose of discussing and improving the Work, but
- excluding communication that is conspicuously marked or otherwise
- designated in writing by the copyright owner as "Not a Contribution."
-
- "Contributor" shall mean Licensor and any individual or Legal Entity
- on behalf of whom a Contribution has been received by Licensor and
- subsequently incorporated within the Work.
-
- 2. Grant of Copyright License. Subject to the terms and conditions of
- this License, each Contributor hereby grants to You a perpetual,
- worldwide, non-exclusive, no-charge, royalty-free, irrevocable
- copyright license to reproduce, prepare Derivative Works of,
- publicly display, publicly perform, sublicense, and distribute the
- Work and such Derivative Works in Source or Object form.
-
- 3. Grant of Patent License. Subject to the terms and conditions of
- this License, each Contributor hereby grants to You a perpetual,
- worldwide, non-exclusive, no-charge, royalty-free, irrevocable
- (except as stated in this section) patent license to make, have made,
- use, offer to sell, sell, import, and otherwise transfer the Work,
- where such license applies only to those patent claims licensable
- by such Contributor that are necessarily infringed by their
- Contribution(s) alone or by combination of their Contribution(s)
- with the Work to which such Contribution(s) was submitted. If You
- institute patent litigation against any entity (including a
- cross-claim or counterclaim in a lawsuit) alleging that the Work
- or a Contribution incorporated within the Work constitutes direct
- or contributory patent infringement, then any patent licenses
- granted to You under this License for that Work shall terminate
- as of the date such litigation is filed.
-
- 4. Redistribution. You may reproduce and distribute copies of the
- Work or Derivative Works thereof in any medium, with or without
- modifications, and in Source or Object form, provided that You
- meet the following conditions:
-
- (a) You must give any other recipients of the Work or
- Derivative Works a copy of this License; and
-
- (b) You must cause any modified files to carry prominent notices
- stating that You changed the files; and
-
- (c) You must retain, in the Source form of any Derivative Works
- that You distribute, all copyright, patent, trademark, and
- attribution notices from the Source form of the Work,
- excluding those notices that do not pertain to any part of
- the Derivative Works; and
-
- (d) If the Work includes a "NOTICE" text file as part of its
- distribution, then any Derivative Works that You distribute must
- include a readable copy of the attribution notices contained
- within such NOTICE file, excluding those notices that do not
- pertain to any part of the Derivative Works, in at least one
- of the following places: within a NOTICE text file distributed
- as part of the Derivative Works; within the Source form or
- documentation, if provided along with the Derivative Works; or,
- within a display generated by the Derivative Works, if and
- wherever such third-party notices normally appear. The contents
- of the NOTICE file are for informational purposes only and
- do not modify the License. You may add Your own attribution
- notices within Derivative Works that You distribute, alongside
- or as an addendum to the NOTICE text from the Work, provided
- that such additional attribution notices cannot be construed
- as modifying the License.
-
- You may add Your own copyright statement to Your modifications and
- may provide additional or different license terms and conditions
- for use, reproduction, or distribution of Your modifications, or
- for any such Derivative Works as a whole, provided Your use,
- reproduction, and distribution of the Work otherwise complies with
- the conditions stated in this License.
-
- 5. Submission of Contributions. Unless You explicitly state otherwise,
- any Contribution intentionally submitted for inclusion in the Work
- by You to the Licensor shall be under the terms and conditions of
- this License, without any additional terms or conditions.
- Notwithstanding the above, nothing herein shall supersede or modify
- the terms of any separate license agreement you may have executed
- with Licensor regarding such Contributions.
-
- 6. Trademarks. This License does not grant permission to use the trade
- names, trademarks, service marks, or product names of the Licensor,
- except as required for describing the origin of the Work and
- reproducing the content of the NOTICE file.
-
- 7. Disclaimer of Warranty. Unless required by applicable law or
- agreed to in writing, Licensor provides the Work (and each
- Contributor provides its Contributions) on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
- implied, including, without limitation, any warranties or conditions
- of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
- PARTICULAR PURPOSE. You are solely responsible for determining the
- appropriateness of using or redistributing the Work and assume any
- risks associated with Your exercise of permissions under this License.
-
- 8. Limitation of Liability. In no event and under no legal theory,
- whether in tort (including negligence), contract, or otherwise,
- unless required by applicable law (such as deliberate and grossly
- negligent acts) or agreed to in writing, shall any Contributor be
- liable to You for damages, including any direct, indirect, special,
- incidental, or consequential damages of any character arising as a
- result of this License or out of the use or inability to use the
- Work (including but not limited to damages for loss of goodwill,
- work stoppage, computer failure or malfunction, or any and all
- other commercial damages or losses), even if such Contributor
- has been advised of the possibility of such damages.
-
- 9. Accepting Warranty or Support. While redistributing
- the Work or Derivative Works thereof, You may choose to offer,
- and charge a fee for, acceptance of support, warranty, indemnity,
- or other liability obligations and/or rights consistent with this
- License. However, in accepting such obligations, You may act only
- on Your own behalf and on Your sole responsibility, not on behalf
- of any other Contributor, and only if You agree to indemnify,
- defend, and hold each Contributor harmless for any liability
- incurred by, or claims asserted against, such Contributor by reason
- of your accepting any such warranty or support.
-
- END OF TERMS AND CONDITIONS
-
- APPENDIX: How to apply the Apache License to your work.
-
- To apply the Apache License to your work, attach the following
- boilerplate notice, with the fields enclosed by brackets "[]"
- replaced with your own identifying information. (Don't include
- the brackets!) The text should be enclosed in the appropriate
- comment syntax for the file format. We also recommend that a
- file or class name and description of purpose be included on the
- same "printed page" as the copyright notice for easier
- identification within third-party archives.
-
- Copyright [yyyy] [name of copyright owner]
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-
+{{ .LicenseContent }}
========================================================================
Apache SkyWalking Horizon UI Subcomponents:
@@ -207,11 +6,18 @@
The Apache SkyWalking Horizon UI binary distribution includes a number
of subcomponents with separate copyright notices and license terms.
Your use of the source code for these subcomponents is subject to the
- terms and conditions of the licenses listed below. The full text of
- each license is reproduced in the licenses/ directory of this
+ terms and conditions of the licenses listed below.
+
+ Subcomponents under a license other than the standard permissive ones
+ (MIT, ISC, BSD-2-Clause, BSD-3-Clause, 0BSD and Apache-2.0) have their
+ full license text reproduced in the licenses/ directory of this
distribution.
By license family, the bundled third-party software is:
========================================================================
-
-{{ .Groups }}
+{{ range .Groups }}
+--- {{ .LicenseID }} ---
+{{ range .Deps }}
+ * {{ .Name }}@{{ .Version }}
+{{- end }}
+{{ end }}
diff --git a/dist-material/release-docs/NOTICE b/dist-material/release-docs/NOTICE
index 471f869b..ba02a83d 100644
--- a/dist-material/release-docs/NOTICE
+++ b/dist-material/release-docs/NOTICE
@@ -3,11 +3,3 @@ Copyright 2017-2026 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
-
-========================================================================
-This binary distribution bundles third-party software, whose own NOTICE
-files (where present) are reproduced below verbatim.
-========================================================================
-
-(No third-party NOTICE files present in bundled dependencies.)
-
diff --git a/dist-material/release-docs/NOTICE.tpl b/dist-material/release-docs/NOTICE.tpl
deleted file mode 100644
index a774f22d..00000000
--- a/dist-material/release-docs/NOTICE.tpl
+++ /dev/null
@@ -1,12 +0,0 @@
-Apache SkyWalking Horizon UI
-Copyright {{ .Year }} The Apache Software Foundation
-
-This product includes software developed at
-The Apache Software Foundation (http://www.apache.org/).
-
-========================================================================
-This binary distribution bundles third-party software, whose own NOTICE
-files (where present) are reproduced below verbatim.
-========================================================================
-
-{{ .Notices }}
diff --git a/dist-material/release-docs/LICENSE.tpl b/dist-material/release-docs/licenses/LICENSE-dompurify-3.4.13.txt
similarity index 92%
copy from dist-material/release-docs/LICENSE.tpl
copy to dist-material/release-docs/licenses/LICENSE-dompurify-3.4.13.txt
index 7b18cfcb..d6456956 100644
--- a/dist-material/release-docs/LICENSE.tpl
+++ b/dist-material/release-docs/licenses/LICENSE-dompurify-3.4.13.txt
@@ -1,3 +1,4 @@
+
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
@@ -137,8 +138,8 @@
6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
- except as required for describing the origin of the Work and
- reproducing the content of the NOTICE file.
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
@@ -162,7 +163,7 @@
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.
- 9. Accepting Warranty or Support. While redistributing
+ 9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
@@ -171,7 +172,7 @@
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
- of your accepting any such warranty or support.
+ of your accepting any such warranty or additional liability.
END OF TERMS AND CONDITIONS
@@ -199,19 +200,3 @@
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-
-
-========================================================================
- Apache SkyWalking Horizon UI Subcomponents:
-
- The Apache SkyWalking Horizon UI binary distribution includes a number
- of subcomponents with separate copyright notices and license terms.
- Your use of the source code for these subcomponents is subject to the
- terms and conditions of the licenses listed below. The full text of
- each license is reproduced in the licenses/ directory of this
- distribution.
-
- By license family, the bundled third-party software is:
-========================================================================
-
-{{ .Groups }}
diff --git a/dist-material/release-docs/licenses/LICENSE-fontsource-variable-inter-5.3.0.txt b/dist-material/release-docs/licenses/LICENSE-fontsource-variable-inter-5.3.0.txt
new file mode 100644
index 00000000..40589daa
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-fontsource-variable-inter-5.3.0.txt
@@ -0,0 +1,93 @@
+Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter) Inter-Italic[opsz,wght].ttf: Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/dist-material/release-docs/licenses/LICENSE-fontsource-variable-jetbrains-mono-5.3.0.txt b/dist-material/release-docs/licenses/LICENSE-fontsource-variable-jetbrains-mono-5.3.0.txt
new file mode 100644
index 00000000..8f7ed671
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-fontsource-variable-jetbrains-mono-5.3.0.txt
@@ -0,0 +1,93 @@
+Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono) JetBrainsMono-Italic[wght].ttf: Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/dist-material/release-docs/licenses/LICENSE-glob-13.0.6.md b/dist-material/release-docs/licenses/LICENSE-glob-13.0.6.md
new file mode 100644
index 00000000..881248b6
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-glob-13.0.6.md
@@ -0,0 +1,63 @@
+All packages under `src/` are licensed according to the terms in
+their respective `LICENSE` or `LICENSE.md` files.
+
+The remainder of this project is licensed under the Blue Oak
+Model License, as follows:
+
+-----
+
+# Blue Oak Model License
+
+Version 1.0.0
+
+## Purpose
+
+This license gives everyone as much permission to work with
+this software as possible, while protecting contributors
+from liability.
+
+## Acceptance
+
+In order to receive this license, you must agree to its
+rules. The rules of this license are both obligations
+under that agreement and conditions to your license.
+You must not do anything with this software that triggers
+a rule that you cannot or will not follow.
+
+## Copyright
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe that contributor's
+copyright in it.
+
+## Notices
+
+You must ensure that everyone who gets a copy of
+any part of this software from you, with or without
+changes, also gets the text of this license or a link to
+<https://blueoakcouncil.org/license/1.0.0>.
+
+## Excuse
+
+If anyone notifies you in writing that you have not
+complied with [Notices](#notices), you can keep your
+license by taking all practical steps to comply within 30
+days after the notice. If you do not do so, your license
+ends immediately.
+
+## Patent
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe any patent claims
+they can license or become able to license.
+
+## Reliability
+
+No contributor can revoke this license.
+
+## No Liability
+
+***As far as the law allows, this software comes as is,
+without any warranty or condition, and no contributor
+will be liable to anyone for any damages related to this
+software or this license, under any kind of legal claim.***
diff --git a/dist-material/release-docs/licenses/LICENSE-lru-cache-11.5.2.md b/dist-material/release-docs/licenses/LICENSE-lru-cache-11.5.2.md
new file mode 100644
index 00000000..c5402b95
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-lru-cache-11.5.2.md
@@ -0,0 +1,55 @@
+# Blue Oak Model License
+
+Version 1.0.0
+
+## Purpose
+
+This license gives everyone as much permission to work with
+this software as possible, while protecting contributors
+from liability.
+
+## Acceptance
+
+In order to receive this license, you must agree to its
+rules. The rules of this license are both obligations
+under that agreement and conditions to your license.
+You must not do anything with this software that triggers
+a rule that you cannot or will not follow.
+
+## Copyright
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe that contributor's
+copyright in it.
+
+## Notices
+
+You must ensure that everyone who gets a copy of
+any part of this software from you, with or without
+changes, also gets the text of this license or a link to
+<https://blueoakcouncil.org/license/1.0.0>.
+
+## Excuse
+
+If anyone notifies you in writing that you have not
+complied with [Notices](#notices), you can keep your
+license by taking all practical steps to comply within 30
+days after the notice. If you do not do so, your license
+ends immediately.
+
+## Patent
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe any patent claims
+they can license or become able to license.
+
+## Reliability
+
+No contributor can revoke this license.
+
+## No Liability
+
+***As far as the law allows, this software comes as is,
+without any warranty or condition, and no contributor
+will be liable to anyone for any damages related to this
+software or this license, under any kind of legal claim.***
diff --git a/dist-material/release-docs/licenses/LICENSE-minimatch-10.2.6.md b/dist-material/release-docs/licenses/LICENSE-minimatch-10.2.6.md
new file mode 100644
index 00000000..8cb5cc6e
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-minimatch-10.2.6.md
@@ -0,0 +1,55 @@
+# Blue Oak Model License
+
+Version 1.0.0
+
+## Purpose
+
+This license gives everyone as much permission to work with
+this software as possible, while protecting contributors
+from liability.
+
+## Acceptance
+
+In order to receive this license, you must agree to its
+rules. The rules of this license are both obligations
+under that agreement and conditions to your license.
+You must not do anything with this software that triggers
+a rule that you cannot or will not follow.
+
+## Copyright
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe that contributor's
+copyright in it.
+
+## Notices
+
+You must ensure that everyone who gets a copy of
+any part of this software from you, with or without
+changes, also gets the text of this license or a link to
+<https://blueoakcouncil.org/license/1.0.0>.
+
+## Excuse
+
+If anyone notifies you in writing that you have not
+complied with [Notices](#notices), you can keep your
+license by taking all practical steps to comply within 30
+days after the notice. If you do not do so, your license
+ends immediately.
+
+## Patent
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe any patent claims
+they can license or become able to license.
+
+## Reliability
+
+No contributor can revoke this license.
+
+## No Liability
+
+**_As far as the law allows, this software comes as is,
+without any warranty or condition, and no contributor
+will be liable to anyone for any damages related to this
+software or this license, under any kind of legal claim._**
diff --git a/dist-material/release-docs/licenses/LICENSE-minipass-7.1.3.md b/dist-material/release-docs/licenses/LICENSE-minipass-7.1.3.md
new file mode 100644
index 00000000..c5402b95
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-minipass-7.1.3.md
@@ -0,0 +1,55 @@
+# Blue Oak Model License
+
+Version 1.0.0
+
+## Purpose
+
+This license gives everyone as much permission to work with
+this software as possible, while protecting contributors
+from liability.
+
+## Acceptance
+
+In order to receive this license, you must agree to its
+rules. The rules of this license are both obligations
+under that agreement and conditions to your license.
+You must not do anything with this software that triggers
+a rule that you cannot or will not follow.
+
+## Copyright
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe that contributor's
+copyright in it.
+
+## Notices
+
+You must ensure that everyone who gets a copy of
+any part of this software from you, with or without
+changes, also gets the text of this license or a link to
+<https://blueoakcouncil.org/license/1.0.0>.
+
+## Excuse
+
+If anyone notifies you in writing that you have not
+complied with [Notices](#notices), you can keep your
+license by taking all practical steps to comply within 30
+days after the notice. If you do not do so, your license
+ends immediately.
+
+## Patent
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe any patent claims
+they can license or become able to license.
+
+## Reliability
+
+No contributor can revoke this license.
+
+## No Liability
+
+***As far as the law allows, this software comes as is,
+without any warranty or condition, and no contributor
+will be liable to anyone for any damages related to this
+software or this license, under any kind of legal claim.***
diff --git a/dist-material/release-docs/licenses/LICENSE-path-scurry-2.0.2.md b/dist-material/release-docs/licenses/LICENSE-path-scurry-2.0.2.md
new file mode 100644
index 00000000..c5402b95
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-path-scurry-2.0.2.md
@@ -0,0 +1,55 @@
+# Blue Oak Model License
+
+Version 1.0.0
+
+## Purpose
+
+This license gives everyone as much permission to work with
+this software as possible, while protecting contributors
+from liability.
+
+## Acceptance
+
+In order to receive this license, you must agree to its
+rules. The rules of this license are both obligations
+under that agreement and conditions to your license.
+You must not do anything with this software that triggers
+a rule that you cannot or will not follow.
+
+## Copyright
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe that contributor's
+copyright in it.
+
+## Notices
+
+You must ensure that everyone who gets a copy of
+any part of this software from you, with or without
+changes, also gets the text of this license or a link to
+<https://blueoakcouncil.org/license/1.0.0>.
+
+## Excuse
+
+If anyone notifies you in writing that you have not
+complied with [Notices](#notices), you can keep your
+license by taking all practical steps to comply within 30
+days after the notice. If you do not do so, your license
+ends immediately.
+
+## Patent
+
+Each contributor licenses you to do everything with this
+software that would otherwise infringe any patent claims
+they can license or become able to license.
+
+## Reliability
+
+No contributor can revoke this license.
+
+## No Liability
+
+***As far as the law allows, this software comes as is,
+without any warranty or condition, and no contributor
+will be liable to anyone for any damages related to this
+software or this license, under any kind of legal claim.***
diff --git a/dist-material/release-docs/licenses/LICENSE-robust-predicates-3.0.3.txt b/dist-material/release-docs/licenses/LICENSE-robust-predicates-3.0.3.txt
new file mode 100644
index 00000000..cf1ab25d
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-robust-predicates-3.0.3.txt
@@ -0,0 +1,24 @@
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <http://unlicense.org>
diff --git a/dist-material/release-docs/licenses/LICENSE-type-fest-0.7.1.txt b/dist-material/release-docs/licenses/LICENSE-type-fest-0.7.1.txt
new file mode 100644
index 00000000..e7af2f77
--- /dev/null
+++ b/dist-material/release-docs/licenses/LICENSE-type-fest-0.7.1.txt
@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <si...@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/package.json b/package.json
index 49aba785..e1626aa8 100644
--- a/package.json
+++ b/package.json
@@ -25,8 +25,8 @@
"test:unit": "pnpm -r run test:unit",
"license:check": "license-eye -c .licenserc.yaml header check",
"license:fix": "license-eye -c .licenserc.yaml header fix",
- "licenses:bin:update": "node scripts/collect-dist-licenses.mjs --update-reference",
- "licenses:bin:check": "node scripts/collect-dist-licenses.mjs --check && node scripts/check-dist-licenses.mjs",
+ "licenses:bin:update": "printf 's\\n' | license-eye -c .licenserc.yaml dependency resolve --summary dist-material/release-docs/LICENSE.tpl",
+ "licenses:bin:check": "pnpm licenses:bin:update && git diff --exit-code -- dist-material/release-docs/LICENSE",
"package": "node scripts/package.mjs",
"start": "HORIZON_CONFIG=${HORIZON_CONFIG:-./horizon.yaml} node dist/server.js",
"lint:deps": "node scripts/check-unused-deps.mjs",
diff --git a/packages/api-client/package.json b/packages/api-client/package.json
index f4eaf779..392abf4b 100644
--- a/packages/api-client/package.json
+++ b/packages/api-client/package.json
@@ -1,6 +1,7 @@
{
"name": "@skywalking-horizon-ui/api-client",
"version": "1.0.0-dev",
+ "license": "Apache-2.0",
"private": true,
"type": "module",
"main": "./dist/index.js",
diff --git a/packages/design-tokens/package.json b/packages/design-tokens/package.json
index 083a028a..b66e7e5b 100644
--- a/packages/design-tokens/package.json
+++ b/packages/design-tokens/package.json
@@ -1,6 +1,7 @@
{
"name": "@skywalking-horizon-ui/design-tokens",
"version": "1.0.0-dev",
+ "license": "Apache-2.0",
"private": true,
"type": "module",
"main": "./dist/index.js",
diff --git a/scripts/check-dist-licenses.mjs b/scripts/check-dist-licenses.mjs
deleted file mode 100644
index 47951cb2..00000000
--- a/scripts/check-dist-licenses.mjs
+++ /dev/null
@@ -1,170 +0,0 @@
-/*
- * Licensed to the Apache Software Foundation (ASF) under one or more
- * contributor license agreements. See the NOTICE file distributed with
- * this work for additional information regarding copyright ownership.
- * The ASF licenses this file to You under the Apache License, Version 2.0
- * (the "License"); you may not use this file except in compliance with
- * the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-/**
- * Read the dependency report produced by `collect-dist-licenses.mjs`
- * and verify:
- *
- * 1. Every package has a recognized license string.
- * 2. No package falls into the ASF "Category-X" (forbidden) bucket
- * — strong copyleft, source-available-only, or commercial-restrictive.
- * 3. Every package's LICENSE file is reproduced under dist/licenses/
- * (a missing file fails the build — operators must commit a
- * hand-supplied copy under `dist-material/release-docs/licenses-extra/`
- * and the collector picks it up next run).
- *
- * Exits non-zero with a per-package diagnostic on any violation.
- * Designed to run in CI (separate job from license-header) and as the
- * last step before the release script signs the binary tarball.
- */
-
-import { existsSync, readFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const repoRoot = resolve(__dirname, '..');
-const distDir = resolve(repoRoot, 'dist');
-const reportPath = resolve(distDir, '.dependency-report.json');
-
-if (!existsSync(reportPath)) {
- console.error(
- `FATAL: ${reportPath} not found. Run \`node scripts/collect-dist-licenses.mjs\` first.`,
- );
- process.exit(1);
-}
-
-const report = JSON.parse(readFileSync(reportPath, 'utf8'));
-
-// ASF "Category A" — permissive, freely redistributable. SPDX-ish keys.
-// See https://www.apache.org/legal/resolved.html
-const ALLOWED = new Set(
- [
- 'Apache-2.0',
- 'Apache 2.0',
- 'Apache License 2.0',
- 'Apache-2',
- 'MIT',
- 'MIT*',
- 'MIT-0',
- 'ISC',
- 'BSD',
- 'BSD-2-Clause',
- 'BSD-3-Clause',
- 'BSD-3-Clause-Clear',
- '0BSD',
- 'CC0-1.0',
- 'CC-BY-3.0',
- 'CC-BY-4.0',
- 'Unlicense',
- 'WTFPL',
- 'Python-2.0',
- 'PSF-2.0',
- 'BlueOak-1.0.0',
- 'Zlib',
- 'Artistic-2.0',
- // SIL Open Font License 1.1 — Apache Category A, explicitly allowed
- // for redistribution alongside Apache-licensed work (see
- // https://www.apache.org/legal/resolved.html#category-a). Carried in
- // via @fontsource-variable/inter + @fontsource-variable/jetbrains-mono;
- // the two TTF/WOFF2 font payloads ship under OFL while the
- // @fontsource wrapper code itself is MIT.
- 'OFL-1.1',
- ].map((s) => s.toLowerCase()),
-);
-
-// Category X — must not appear in a binary release.
-const FORBIDDEN_PATTERNS = [
- /\bAGPL/i,
- /\bSSPL/i,
- /\bBUSL/i,
- /commons[\s-]?clause/i,
- /\bRPL/i, // Reciprocal Public License
- /\bMs[-\s]?RL/i, // Microsoft Reciprocal
- /\bMPL[-\s]?1\./i, // MPL 1.x (only 2.0 is Cat-B / allowed-with-care)
-];
-
-// Category B — allowed but each must be reproduced verbatim. EPL, CDDL,
-// MPL-2.0, LGPL-2.1, LGPL-3.0. Flagged but not failing — the LICENSE
-// summary already lists them; vote reviewers can audit.
-const WEAK_COPYLEFT_PATTERNS = [
- /\bEPL\b/i,
- /\bCDDL/i,
- /\bMPL[-\s]?2/i,
- /\bLGPL/i,
-];
-
-const errors = [];
-const warnings = [];
-
-for (const pkg of report.packages) {
- const id = `${pkg.name}@${pkg.version}`;
- const lic = (pkg.license ?? '').trim();
- const licLower = lic.toLowerCase();
-
- if (!lic || licLower === 'unknown') {
- errors.push(`${id}: missing or unknown license (declared: ${JSON.stringify(pkg.license)})`);
- continue;
- }
-
- // SPDX expressions: split on OR / AND. If any sub-expression is fully
- // allowed, we accept the package under that one. AND requires all parts allowed.
- const parts = lic.split(/\s+OR\s+|\s+AND\s+/i).map((s) => s.replace(/[()]/g, '').trim());
- const operator = / AND /i.test(lic) ? 'AND' : 'OR';
-
- const partOk = parts.map((p) => ALLOWED.has(p.toLowerCase()));
- const accepted = operator === 'AND' ? partOk.every(Boolean) : partOk.some(Boolean);
-
- for (const re of FORBIDDEN_PATTERNS) {
- if (re.test(lic)) {
- errors.push(`${id}: forbidden license: ${lic}`);
- }
- }
-
- if (!accepted && !errors.some((e) => e.startsWith(`${id}:`))) {
- // Allow weak-copyleft with a warning. Block everything else.
- if (WEAK_COPYLEFT_PATTERNS.some((re) => re.test(lic))) {
- warnings.push(`${id}: weak-copyleft license '${lic}' — included verbatim under licenses/`);
- } else {
- errors.push(`${id}: unrecognized license '${lic}' — add to ALLOWED if compatible, or remove the dep`);
- }
- }
-
- if (!pkg.licenseFile) {
- // A missing license file is a vote-blocker for non-trivial deps.
- warnings.push(`${id}: no LICENSE-like file shipped under licenses/ (license declared: ${lic})`);
- }
-}
-
-if (warnings.length > 0) {
- console.warn('Warnings:');
- for (const w of warnings) console.warn(` - ${w}`);
-}
-
-if (errors.length > 0) {
- console.error('');
- console.error(`License check FAILED with ${errors.length} error(s):`);
- for (const e of errors) console.error(` - ${e}`);
- console.error('');
- process.exit(1);
-}
-
-console.log(
- `License check OK: ${report.packageCount} packages, ` +
- `${Object.keys(report.byLicense).length} license families, ` +
- `${warnings.length} warning(s).`,
-);
diff --git a/scripts/collect-dist-licenses.mjs b/scripts/collect-dist-licenses.mjs
deleted file mode 100644
index ccc78b83..00000000
--- a/scripts/collect-dist-licenses.mjs
+++ /dev/null
@@ -1,388 +0,0 @@
-/*
- * Licensed to the Apache Software Foundation (ASF) under one or more
- * contributor license agreements. See the NOTICE file distributed with
- * this work for additional information regarding copyright ownership.
- * The ASF licenses this file to You under the Apache License, Version 2.0
- * (the "License"); you may not use this file except in compliance with
- * the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-/**
- * Generate the BINARY distribution's LICENSE / NOTICE (+ per-dependency
- * license texts) by enumerating the full PRODUCTION dependency tree the
- * binary bundles:
- *
- * - the BFF runtime deps (shipped verbatim as dist/node_modules), AND
- * - the UI's production deps (compiled into dist/static by Vite).
- *
- * Both are redistributed in the binary tarball, so ASF distribution policy
- * requires every one of their licenses to be reproduced. We read the tree
- * via `pnpm list --prod` filtered to the bff + ui workspace packages — so
- * this runs after a plain `pnpm install`, with NO `pnpm package` step. That
- * lets CI regenerate and diff cheaply.
- *
- * Output is deterministic: the NOTICE copyright year is read from the
- * repo-root NOTICE (not the wall clock) and the dependency report carries no
- * timestamp, so the committed reference is byte-stable across runs/years.
- *
- * Modes:
- * (default) Write dist/LICENSE, dist/NOTICE, dist/licenses/<pkg>/,
- * and dist/.dependency-report.json (consumed by
- * check-dist-licenses.mjs and the release packager).
- * --update-reference Also copy the generated LICENSE + NOTICE into
- * dist-material/release-docs/ — the committed
- * reference. Run after any production-dependency
- * change, then commit the diff.
- * --check Compare the freshly generated LICENSE + NOTICE
- * against the committed reference and exit non-zero on
- * any drift (the CI guard).
- */
-
-import { execSync } from 'node:child_process';
-import {
- cpSync,
- existsSync,
- mkdirSync,
- readFileSync,
- readdirSync,
- rmSync,
- writeFileSync,
-} from 'node:fs';
-import { dirname, join, relative, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { parse as parseYaml } from 'yaml';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const repoRoot = resolve(__dirname, '..');
-const distDir = resolve(repoRoot, 'dist');
-const licensesOutDir = resolve(distDir, 'licenses');
-const templatesDir = resolve(repoRoot, 'dist-material/release-docs');
-// The committed binary LICENSE / NOTICE live next to their .tpl sources.
-const referenceDir = templatesDir;
-
-const args = new Set(process.argv.slice(2));
-const CHECK = args.has('--check');
-const UPDATE_REFERENCE = args.has('--update-reference');
-
-// Workspace packages whose PRODUCTION dependencies end up in the binary
-// (bff → node_modules at runtime; ui → compiled into the static bundle).
-const BUNDLED_WORKSPACE_PACKAGES = [
- '@skywalking-horizon-ui/bff',
- '@skywalking-horizon-ui/ui',
-];
-
-const LICENSE_FILE_PATTERNS = [
- /^LICENSE$/i,
- /^LICENCE$/i,
- /^LICENSE\.(md|txt|rst)$/i,
- /^LICENCE\.(md|txt|rst)$/i,
- /^COPYING$/i,
- /^COPYING\.(md|txt|rst)$/i,
- /^COPYRIGHT$/i,
- /^COPYRIGHT\.(md|txt|rst)$/i,
-];
-const NOTICE_FILE_PATTERNS = [/^NOTICE$/i, /^NOTICE\.(md|txt|rst)$/i];
-
-function pickFile(dir, patterns) {
- if (!existsSync(dir)) return null;
- for (const entry of readdirSync(dir)) {
- if (patterns.some((p) => p.test(entry))) return join(dir, entry);
- }
- return null;
-}
-
-// Enumerate every third-party production package reachable from the bundled
-// workspace packages. `pnpm list --prod --depth Infinity` resolves each
-// entry to its real path in the pnpm store, so license files are readable
-// straight from there — no dist/node_modules required.
-function collectPackages() {
- const filters = BUNDLED_WORKSPACE_PACKAGES.flatMap((p) => ['--filter', p]);
- const raw = execSync(
- ['pnpm', 'list', '--prod', '--depth', 'Infinity', '--json', ...filters].join(' '),
- {
- cwd: repoRoot,
- maxBuffer: 128 * 1024 * 1024,
- stdio: ['ignore', 'pipe', 'inherit'],
- },
- ).toString();
- const json = JSON.parse(raw);
- const roots = Array.isArray(json) ? json : [json];
-
- const seen = new Map(); // key: name@version → { name, version, path }
- function walk(deps) {
- if (!deps) return;
- for (const [name, info] of Object.entries(deps)) {
- // First-party workspace packages are our own code — recurse past
- // them so their third-party deps are still captured.
- if (name.startsWith('@skywalking-horizon-ui/')) {
- walk(info.dependencies);
- continue;
- }
- const version = info.version;
- const key = `${name}@${version}`;
- if (!seen.has(key)) {
- const pkgPath = info.path;
- if (!pkgPath || !existsSync(pkgPath)) {
- console.warn(`WARN: package path missing for ${key}: ${pkgPath}`);
- } else {
- seen.set(key, { name, version, path: pkgPath });
- }
- }
- walk(info.dependencies);
- }
- }
- for (const root of roots) walk(root.dependencies);
-
- return Array.from(seen.values()).sort((a, b) =>
- a.name === b.name ? a.version.localeCompare(b.version) : a.name.localeCompare(b.name),
- );
-}
-
-// Human-asserted SPDX licenses for deps whose package.json omits or
-// mis-declares `license`. Single source of truth is skywalking-eyes'
-// native `dependency.licenses` list in .licenserc.yaml — so the same
-// declaration drives both `license-eye dependency check` and this binary
-// LICENSE generator. Keyed by `name@version` (exact) and bare `name`
-// (any version); the exact key wins.
-const licenseOverrides = (() => {
- const exact = new Map();
- const anyVersion = new Map();
- const p = resolve(repoRoot, '.licenserc.yaml');
- try {
- const cfg = parseYaml(readFileSync(p, 'utf8'));
- for (const e of cfg?.dependency?.licenses ?? []) {
- if (!e?.name || !e?.license) continue;
- if (e.version) exact.set(`${e.name}@${e.version}`, e.license);
- else anyVersion.set(e.name, e.license);
- }
- } catch (err) {
- console.warn(`WARN: cannot read dependency.licenses from ${p}: ${err.message}`);
- }
- return { exact, anyVersion };
-})();
-
-function overrideFor(name, version) {
- return (
- licenseOverrides.exact.get(`${name}@${version}`) ??
- licenseOverrides.anyVersion.get(name) ??
- null
- );
-}
-
-function normalizeLicense(pkgJson) {
- const lic = pkgJson.license;
- if (typeof lic === 'string') return lic;
- if (lic && typeof lic === 'object' && typeof lic.type === 'string') {
- return lic.type;
- }
- if (Array.isArray(pkgJson.licenses)) {
- return pkgJson.licenses.map((l) => l.type || l).filter(Boolean).join(' OR ');
- }
- return 'UNKNOWN';
-}
-
-function readPkgJson(pkgPath) {
- const p = join(pkgPath, 'package.json');
- if (!existsSync(p)) return null;
- try {
- return JSON.parse(readFileSync(p, 'utf8'));
- } catch (e) {
- console.warn(`WARN: cannot parse ${p}: ${e.message}`);
- return null;
- }
-}
-
-// Read the copyright year from the committed root NOTICE so the generated
-// binary NOTICE is reproducible (a wall-clock year would drift every Jan 1
-// and break the CI diff).
-// Apache SkyWalking entered the ASF in 2017 — the fixed founding year that
-// opens every SkyWalking copyright span. Only the end year advances.
-const FOUNDING_YEAR = 2017;
-
-function noticeYear() {
- try {
- const txt = readFileSync(resolve(repoRoot, 'NOTICE'), 'utf8');
- // The committed root NOTICE is the source of truth (keeps the binary
- // NOTICE reproducible). Capture the full span (e.g. `2017-2026`).
- const m = txt.match(/Copyright\s+(\d{4}(?:-\d{4})?)\s+The Apache Software Foundation/);
- if (m) return m[1];
- } catch {
- /* fall through to the founding-year-anchored fallback */
- }
- const now = new Date().getUTCFullYear();
- return now > FOUNDING_YEAR ? `${FOUNDING_YEAR}-${now}` : String(FOUNDING_YEAR);
-}
-
-// Apache-produced dependencies whose NOTICE is just the generic ASF
-// attribution. That attribution is already carried by our own root NOTICE
-// (same legal entity), so reproducing it per-dep is redundant noise. The
-// skip is GUARDED by isGenericAsfNotice() below — if a listed dep's NOTICE
-// ever gains a specific attribution it stops matching and is included
-// again, so we never silently drop a required notice.
-const ASF_PRODUCTS = new Set(['echarts']);
-
-// Matches the boilerplate every ASF project ships and nothing more:
-// Apache <Product>
-// Copyright <year[-year]> The Apache Software Foundation
-// This product includes software developed at
-// The Apache Software Foundation (https://www.apache.org/).
-const GENERIC_ASF_NOTICE =
- /^Apache .+\s+Copyright\s+\d{4}(?:-\d{4})?\s+The Apache Software Foundation\s+This product includes software developed at\s+The Apache Software Foundation\s+\(https?:\/\/www\.apache\.org\/?\)\.?\s*$/;
-
-function isRedundantAsfNotice(name, noticeText) {
- return ASF_PRODUCTS.has(name) && GENERIC_ASF_NOTICE.test(noticeText.trim());
-}
-
-const packages = collectPackages();
-
-mkdirSync(distDir, { recursive: true });
-rmSync(licensesOutDir, { recursive: true, force: true });
-mkdirSync(licensesOutDir, { recursive: true });
-
-const report = [];
-const byLicense = new Map();
-const noticePieces = [];
-
-for (const pkg of packages) {
- const pj = readPkgJson(pkg.path);
- if (!pj) continue;
- const license = overrideFor(pkg.name, pkg.version) ?? normalizeLicense(pj);
- const homepage = pj.homepage || pj.repository?.url || pj.repository || '';
- const entry = {
- name: pkg.name,
- version: pkg.version,
- license,
- homepage: typeof homepage === 'string' ? homepage : '',
- licenseFile: null,
- noticeFile: null,
- };
-
- const slug = `${pkg.name.replace(/\//g, '__')}-${pkg.version}`;
- const outDir = join(licensesOutDir, slug);
-
- const licFile = pickFile(pkg.path, LICENSE_FILE_PATTERNS);
- if (licFile) {
- if (!existsSync(outDir)) mkdirSync(outDir, { recursive: true });
- const dest = join(outDir, relative(pkg.path, licFile));
- mkdirSync(dirname(dest), { recursive: true });
- cpSync(licFile, dest);
- entry.licenseFile = relative(distDir, dest);
- }
- const noticeFile = pickFile(pkg.path, NOTICE_FILE_PATTERNS);
- if (noticeFile) {
- const noticeText = readFileSync(noticeFile, 'utf8');
- // ASF-product NOTICEs that carry only the generic ASF attribution are
- // already covered by our root NOTICE — don't reproduce them.
- if (!isRedundantAsfNotice(pkg.name, noticeText)) {
- if (!existsSync(outDir)) mkdirSync(outDir, { recursive: true });
- const dest = join(outDir, relative(pkg.path, noticeFile));
- mkdirSync(dirname(dest), { recursive: true });
- cpSync(noticeFile, dest);
- entry.noticeFile = relative(distDir, dest);
- noticePieces.push(
- `------ ${pkg.name}@${pkg.version} ------\n${noticeText.trim()}\n`,
- );
- }
- }
-
- report.push(entry);
- const bucket = byLicense.get(license) ?? [];
- bucket.push(entry);
- byLicense.set(license, bucket);
-}
-
-// Render LICENSE.tpl → dist/LICENSE
-const groupLines = [];
-const sortedLicenses = Array.from(byLicense.keys()).sort();
-for (const lic of sortedLicenses) {
- groupLines.push(`\n--- ${lic} ---\n`);
- for (const e of byLicense.get(lic)) {
- const ref = e.licenseFile ? ` (${e.licenseFile})` : '';
- groupLines.push(` * ${e.name}@${e.version}${ref}`);
- }
-}
-const licenseTpl = readFileSync(join(templatesDir, 'LICENSE.tpl'), 'utf8');
-const licenseOut = licenseTpl.replace('{{ .Groups }}', groupLines.join('\n'));
-writeFileSync(join(distDir, 'LICENSE'), licenseOut);
-
-// Render NOTICE.tpl → dist/NOTICE
-const noticeTpl = readFileSync(join(templatesDir, 'NOTICE.tpl'), 'utf8');
-const noticeOut = noticeTpl
- .replace('{{ .Year }}', noticeYear())
- .replace(
- '{{ .Notices }}',
- noticePieces.length > 0
- ? noticePieces.join('\n')
- : '(No third-party NOTICE files present in bundled dependencies.)\n',
- );
-writeFileSync(join(distDir, 'NOTICE'), noticeOut);
-
-// Machine-readable report for check-dist-licenses.mjs. No timestamp — the
-// file is an input to a deterministic diff, not an audit log.
-writeFileSync(
- join(distDir, '.dependency-report.json'),
- JSON.stringify(
- {
- packageCount: report.length,
- packages: report,
- byLicense: Object.fromEntries(
- sortedLicenses.map((l) => [l, byLicense.get(l).length]),
- ),
- },
- null,
- 2,
- ) + '\n',
-);
-
-console.log(
- `Wrote dist/LICENSE, dist/NOTICE, dist/licenses/ (${report.length} packages, ` +
- `${sortedLicenses.length} license families).`,
-);
-
-// ── Reference sync / drift check ────────────────────────────────────────
-const refLicense = join(referenceDir, 'LICENSE');
-const refNotice = join(referenceDir, 'NOTICE');
-
-if (UPDATE_REFERENCE) {
- cpSync(join(distDir, 'LICENSE'), refLicense);
- cpSync(join(distDir, 'NOTICE'), refNotice);
- console.log(
- `Updated committed reference: ${relative(repoRoot, refLicense)}, ${relative(repoRoot, refNotice)}.`,
- );
-}
-
-if (CHECK) {
- const drift = [];
- for (const [label, generated, reference] of [
- ['LICENSE', join(distDir, 'LICENSE'), refLicense],
- ['NOTICE', join(distDir, 'NOTICE'), refNotice],
- ]) {
- if (!existsSync(reference)) {
- drift.push(`${label}: committed reference ${relative(repoRoot, reference)} is missing.`);
- continue;
- }
- if (readFileSync(generated, 'utf8') !== readFileSync(reference, 'utf8')) {
- drift.push(`${label}: differs from ${relative(repoRoot, reference)}.`);
- }
- }
- if (drift.length > 0) {
- console.error('');
- console.error('Binary LICENSE / NOTICE drift detected:');
- for (const d of drift) console.error(` - ${d}`);
- console.error('');
- console.error(
- 'Production dependencies changed without regenerating the committed reference.',
- );
- console.error('Run: pnpm licenses:bin:update then commit dist-material/release-docs/.');
- process.exit(1);
- }
- console.log('Binary LICENSE / NOTICE match the committed reference.');
-}
diff --git a/scripts/release.sh b/scripts/release.sh
index 7b5490fd..0bf54dc0 100755
--- a/scripts/release.sh
+++ b/scripts/release.sh
@@ -331,8 +331,7 @@ pnpm -r run test:unit
pnpm lint # eslint + source budget + both i18n gates
pnpm license:check # Apache headers
pnpm package # assemble dist/ (also proves the packager works)
-node "${CLONE_DIR}/scripts/collect-dist-licenses.mjs" --check
-node "${CLONE_DIR}/scripts/check-dist-licenses.mjs"
+pnpm licenses:bin:check # binary LICENSE still matches the dependency tree
echo "Release commit passed every gate — safe to tag."
git tag "${TAG}"
@@ -376,12 +375,15 @@ cd "${CLONE_DIR}"
pnpm install --frozen-lockfile
pnpm package
# The packager left dist/server.js + dist/node_modules + dist/static + …
-# Now layer in LICENSE/NOTICE + per-dep license texts. `--check` regenerates
-# dist/LICENSE + dist/NOTICE AND aborts if they drift from the committed
-# reference (dist-material/release-docs/) — so the binary ships exactly the
-# reviewed bytes. check-dist-licenses then enforces the ASF allow/deny list.
-node "${CLONE_DIR}/scripts/collect-dist-licenses.mjs" --check
-node "${CLONE_DIR}/scripts/check-dist-licenses.mjs"
+# Now layer in the binary-flavored LICENSE/NOTICE and the license texts that
+# ASF requires be reproduced. These are the REVIEWED bytes from
+# dist-material/release-docs/, committed and voted on — they are copied, not
+# regenerated here, so the tarball cannot differ from what the vote saw.
+# `licenses:bin:check` above already proved they match the dependency tree.
+cp "${CLONE_DIR}/dist-material/release-docs/LICENSE" "${CLONE_DIR}/dist/LICENSE"
+cp "${CLONE_DIR}/dist-material/release-docs/NOTICE" "${CLONE_DIR}/dist/NOTICE"
+rm -rf "${CLONE_DIR}/dist/licenses"
+cp -R "${CLONE_DIR}/dist-material/release-docs/licenses" "${CLONE_DIR}/dist/licenses"
# Stage the binary contents under a clean folder name so the tar root
# entry matches the artifact name. Copy in the operator-facing docs too.
@@ -391,10 +393,10 @@ cp -R "${CLONE_DIR}/dist" "${BIN_STAGE}"
# Same packaging convention as the source tarball.
cp "${CLONE_DIR}/docs/changelog/${RELEASE_VERSION}.md" "${BIN_STAGE}/CHANGELOG.md"
cp "${CLONE_DIR}/README.md" "${BIN_STAGE}/README.md"
-# dist/LICENSE and dist/NOTICE were just generated by the collector and
-# are the BINARY-flavored versions (Apache-2.0 + bundled-dep summary +
-# pass-through NOTICEs). The repo-root LICENSE/NOTICE — source-flavored —
-# stay in the source tarball only. Do NOT overwrite.
+# dist/LICENSE and dist/NOTICE are the BINARY-flavored versions copied in
+# above (Apache-2.0 plus the bundled-dep summary). The repo-root
+# LICENSE/NOTICE — source-flavored — stay in the source tarball only.
+# Do NOT overwrite.
BIN_TAR="${WORK_DIR}/${PRODUCT_NAME}-${RELEASE_VERSION}-bin.tar.gz"
tar -C "${WORK_DIR}" -czf "${BIN_TAR}" "${PRODUCT_NAME}-${RELEASE_VERSION}-bin"
@@ -406,7 +408,7 @@ note "Step 11 — Verify LICENSE/NOTICE in src + bin tarballs"
# Both tarballs must carry a LICENSE and NOTICE at their root, and the
# binary version must be the expanded one (contains the "Subcomponents"
-# section the collector appends). The source version must NOT contain
+# section). The source version must NOT contain
# that section — a bundled-dep summary on a source-only tarball would
# be a wire-shape lie.
src_license=$(tar -tzf "${SRC_TAR}" | grep -E "^${PRODUCT_NAME}-${RELEASE_VERSION}-src/LICENSE$" || true)