path: root/etc/third_party_components.yml

# List of Third Party Components in MongoDB source code
#
# This file is consumed by buildscripts/blackduck_hub.py

# Sample
# Note: the word TO_DO is supposed to be spelled as "TODO". It is spelled awkwardly in the example
# to avoid the TODO scanner from filing an issue on the sample code.
#
# component_name: Sample Example Compnent
# 	homepage_url: https://www.example.com
# 	local_directory_path: src/third_party/example
#   open_hub_url: https://www.openhub.net/p/example
#   release_monitoring_id: 1234
#   is_test_only: false
# 	upgrade_suppression: TO_DO SERVER-12345
# 	vulnerability_suppression: TO_DO SERVER-12345
# 	team_owner: example


# Description
# component_name - string - required - Name of component in Black Duck Hub
# homepage_url - URL - required - website where to find third party component
# open_hub_url - URL - required - Black Duck Open Hub URL where to find third party component
#                         not always available, see https://www.openhub.net
#                         if not available, use text "N/A"
# release_monitoring_id - integer - required - id of Fedora's Anitya project for monitoring releases
#                         not always available, see https://release-monitoring.org/
#                         if not available, use integer "-1"
# local_directory_path - path - required - relative path to directory containing code
# is_test_only - bool - optional - false by default, true if the component is only part of test code and not shipped to users
#                test only components are not checked for upgrade or vulnerability issues
# upgrade_suppression - string - optional - SERVER- or TW- ticket in JIRA, if present upgrade issues are ignored
#                       Must be prefixed with TODO
# vulnerability_suppression - string - optional - SERVER- or WT- ticket in JIRA, if present vulnerability issues are ignored
#                             Must be prefixed with TODO
# team_owner - string - required - server team that is responsible for maintaining library

# TODO - can we query JIRA to see if the tickets are closed, check DAG code

components:

  abseil:
    homepage_url: https://abseil.io
    open_hub_url: N/A
    release_monitoring_id: 115295
    local_directory_path: src/third_party/abseil-cpp-master
    team_owner: "Service Architecture"
    # Note: abseil exists in Black Duck, but not OpenHub
    upgrade_suppression: TODO SERVER-58675

  Aladdin MD5:
    homepage_url: N/A
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: [src/mongo/util/md5.h, src/mongo/util/md5.cpp]
    team_owner: "Security"
    # Not covered in Black Duck

  "ASIO C++ Library":
    homepage_url: http://think-async.com/Asio/
    open_hub_url: N/A
    release_monitoring_id: 117
    local_directory_path: src/third_party/asio-master
    team_owner: "Service Architecture"
    upgrade_suppression: TODO SERVER-54659

  benchmark:
    homepage_url: https://github.com/google/benchmark
    open_hub_url: https://www.openhub.net/p/benchmark
    release_monitoring_id: 18299
    local_directory_path: src/third_party/benchmark
    is_test_only: true
    team_owner: "Service Architecture"

  "Boost C++ Libraries - boost":
    homepage_url: https://www.boost.org/
    open_hub_url: https://www.openhub.net/p/boost
    release_monitoring_id: 6845
    local_directory_path: src/third_party/boost
    team_owner: "Service Architecture"

  concurrencytest:
    homepage_url: https://github.com/cgoldberg/concurrencytest
    open_hub_url: https://www.openhub.net/p/concurrencytest
    release_monitoring_id: -1
    local_directory_path: src/third_party/wiredtiger/test/3rdparty/concurrencytest-0.1.2
    is_test_only: true
    team_owner: "Wiredtiger"

  "dcleblanc/SafeInt":
    homepage_url: https://github.com/dcleblanc/SafeInt
    open_hub_url: https://www.openhub.net/p/SafeInt
    release_monitoring_id: -1
    local_directory_path: src/third_party/SafeInt
    team_owner: "Service Architecture"

  discover-python:
    homepage_url: https://pypi.org/project/discover/
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/wiredtiger/test/3rdparty/discover-0.4.0
    is_test_only: true
    team_owner: "Wiredtiger"

  fmtlib/fmt:
    homepage_url: https://fmt.dev
    open_hub_url: https://www.openhub.net/p/fmtlib_fmt
    release_monitoring_id: 11526
    local_directory_path: src/third_party/fmt
    team_owner: "Security"
    upgrade_suppression: TODO SERVER-57876

  google/s2geometry:
    homepage_url: https://github.com/google/s2geometry
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/s2
    team_owner: "Query"
    # Note: Code in MongoDB is based on early release here - https://code.google.com/archive/p/s2-geometry-library/

  google-snappy:
    homepage_url: https://google.github.io/snappy/
    open_hub_url: N/A
    release_monitoring_id: 4844
    local_directory_path: src/third_party/snappy-1.1.7
    team_owner: "Storage Execution"
    upgrade_suppression: TODO SERVER-47281
    # TODO - bad version data

  gperftools:
    homepage_url: https://github.com/gperftools/gperftools
    open_hub_url: https://www.openhub.net/p/google-perftools
    release_monitoring_id: 1238
    local_directory_path: src/third_party/gperftools
    team_owner: "Storage Execution"
    # TODO - fix the version number in Black Duck

  "ICU for C/C++ (ICU4C)":
    homepage_url: http://site.icu-project.org/
    open_hub_url: https://www.openhub.net/p/icu4c
    release_monitoring_id: 16134
    local_directory_path: src/third_party/icu4c-57.1
    team_owner: "Query"
    vulnerability_suppression: TODO SERVER-49211
    upgrade_suppression: TODO SERVER-49211

  "Intel Decimal Floating-Point Math Library":
    homepage_url: https://software.intel.com/content/www/us/en/develop/articles/intel-decimal-floating-point-math-library.html
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/IntelRDFPMathLib20U1
    team_owner: "Storage Execution"
    # Note: IntelRDFPMathLib exists in Black Duck, but not OpenHub

  jbeder/yaml-cpp:
    homepage_url: https://github.com/jbeder/yaml-cpp
    open_hub_url: https://www.openhub.net/p/jbeder_yaml-cpp
    release_monitoring_id: 5284
    local_directory_path: src/third_party/yaml-cpp
    team_owner: "Security"
    upgrade_suppression: TODO SERVER-60439

  JSON-Schema-Test-Suite:
    homepage_url: https://github.com/json-schema-org/JSON-Schema-Test-Suite
    open_hub_url: https://www.openhub.net/p/json-schema-test-suite
    release_monitoring_id: -1
    local_directory_path: src/third_party/JSON-Schema-Test-Suite
    is_test_only: true
    team_owner: "Query"

  libmongocrypt:
    homepage_url: https://github.com/mongodb/libmongocrypt
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/kms-message
    team_owner: "Security"
    # Note: libmongocrypt exists in Black Duck, but not OpenHub
    upgrade_suppression: TODO SERVER-61193

  linenoise:
    homepage_url: https://github.com/antirez/linenoise
    open_hub_url: https://www.openhub.net/p/linenoise
    release_monitoring_id: 5691
    local_directory_path: [src/mongo/shell/linenoise.h, src/mongo/shell/linenoise.cpp]
    team_owner: "Server Tools and Methodology"
    upgrade_suppression: TODO SERVER-514767

  LibTomCrypt:
    homepage_url: https://www.libtom.net/
    open_hub_url: https://www.openhub.net/p/libtomcrypt
    release_monitoring_id: 15563
    local_directory_path: src/third_party/tomcrypt-1.18.2
    team_owner: "Security"

  libunwind:
    homepage_url: http://www.nongnu.org/libunwind/
    open_hub_url: https://www.openhub.net/p/p_w_d10376
    release_monitoring_id: 1748
    local_directory_path: src/third_party/unwind
    team_owner: "Service Architecture"

  "Mozilla Firefox":
    homepage_url: https://www.mozilla.org/en-US/firefox/organizations/
    open_hub_url: https://www.openhub.net/p/firefox
    release_monitoring_id: 16838
    local_directory_path: src/third_party/mozjs
    team_owner: "Query"
    upgrade_suppression: TODO SERVER-64574

  "mpark-variant-devel":
    homepage_url: https://github.com/mpark/variant
    open_hub_url: N/A
    release_monitoring_id: 18301
    local_directory_path: src/third_party/variant-1.4.0
    team_owner: "Service Architecture"

  ocspbuilder:
    homepage_url: https://github.com/wbond/ocspbuilder
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/mock_ocsp_responder
    is_test_only: true
    team_owner: "Security"
    # Note: ocspbuilder exists in Black Duck, but not OpenHub

  ocspresponder:
    homepage_url: https://github.com/threema-ch/ocspresponder
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/mock_ocsp_responder
    is_test_only: true
    team_owner: "Security"
    # Note: ocspresponder exists in Black Duck, but not OpenHub

  PCRE:
    homepage_url: https://www.pcre.org/
    open_hub_url: https://www.openhub.net/p/pcre
    release_monitoring_id: 2610
    local_directory_path: src/third_party/pcre-8.42
    team_owner: "Query"
    upgrade_suppression: TODO SERVER-47278

  PCRE2:
    homepage_url: https://www.pcre.org/
    open_hub_url: https://www.openhub.net/p/pcre2
    release_monitoring_id: 5832
    local_directory_path: src/third_party/pcre2
    team_owner: "Query"

  python-testscenarios:
    homepage_url: https://launchpad.net/testscenarios
    open_hub_url: https://www.openhub.net/p/testscenarios
    release_monitoring_id: 13220
    local_directory_path: src/third_party/wiredtiger/test/3rdparty/testscenarios-0.4
    is_test_only: true
    team_owner: "Wiredtiger"

  extras:
    homepage_url: https://github.com/testing-cabal/extras
    open_hub_url: https://www.openhub.net/p/550227
    release_monitoring_id: 13192
    local_directory_path: src/third_party/wiredtiger/test/3rdparty/extras-0.0.3
    is_test_only: true
    team_owner: "Wiredtiger"

  SchemaStore/schemastore:
    homepage_url: https://www.schemastore.org/
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/schemastore.org
    is_test_only: true
    team_owner: "Query"

  "SCons - a Software Construction tool":
    homepage_url: https://www.scons.org/
    open_hub_url: https://www.openhub.net/p/scons
    release_monitoring_id: 4770
    local_directory_path: src/third_party/scons-3.1.2
    team_owner: "Service Development Platform"
    upgrade_suppression: TODO SERVER-49324

  smhasher:
    homepage_url: https://github.com/aappleby/smhasher
    open_hub_url: https://www.openhub.net/p/smhasher
    release_monitoring_id: -1
    local_directory_path: src/third_party/murmurhash3
    team_owner: "Storage Execution"

  "Snowball Stemming Algorithms":
    homepage_url: https://snowballstem.org/
    open_hub_url: https://www.openhub.net/p/Snowball_Stemming_Algorithms
    release_monitoring_id: 7853
    local_directory_path: src/third_party/libstemmer_c
    team_owner: "Query"
    upgrade_suppression: TODO SERVER-51478

  subunit:
    homepage_url: https://launchpad.net/subunit
    open_hub_url: N/A
    release_monitoring_id: 85461
    local_directory_path: src/third_party/wiredtiger/test/3rdparty/python-subunit-0.0.16
    is_test_only: true
    team_owner: "Wiredtiger"

  timelib:
    homepage_url: https://github.com/derickr/timelib
    open_hub_url: N/A
    release_monitoring_id: -1
    local_directory_path: src/third_party/timelib-2021.06
    team_owner: "Query"
    # Note: Not in Black Duck

  unicode:
    homepage_url: http://www.unicode.org
    open_hub_url: N/A
    release_monitoring_id: 5045
    local_directory_path: src/third_party/unicode-8.0.0
    team_owner: "Query"

  valgrind:
    homepage_url: https://valgrind.org/
    open_hub_url: https://www.openhub.net/p/valgrind
    release_monitoring_id: 13639
    local_directory_path: src/third_party/valgrind
    team_owner: "Decision Automation Group"

  testtools:
    homepage_url: https://launchpad.net/testtools
    open_hub_url: https://www.openhub.net/p/python-testtools
    release_monitoring_id: 4047
    local_directory_path: src/third_party/wiredtiger/test/3rdparty/testtools-0.9.34
    is_test_only: true
    team_owner: "Wiredtiger"

  zlib:
    homepage_url: https://www.zlib.net/
    open_hub_url: https://www.openhub.net/p/zlib
    release_monitoring_id: 5303
    local_directory_path: src/third_party/zlib-1.2.12
    team_owner: "Storage Execution"

  zstd:
    homepage_url: http://www.zstd.net/
    open_hub_url: https://www.openhub.net/p/zstd
    release_monitoring_id: 12083
    local_directory_path: src/third_party/zstandard
    team_owner: "Storage Execution"