Licenses file (#16554)

* wip for licenses

* Lots of changes

- bump clojure.data.xml to prevent illegal access
- had to change navigators because of this
- switch to full text of license
- algo is now:
  1. check for a license file in jar
  2. check for an override pointing to a license file locally in
     resources
  3. Check pom file for license information and just use that

can be invoked as:
```bash
% clj -X mb.licenses/process :classpath \"$(cd ../.. && lein classpath)\" :backfill "\"overrides.edn\"" :output-filename "\"backend-licenses.txt\""
License information written to  backend-licenses.txt
/Users/dan/.m2/repository/net/jcip/jcip-annotations/1.0/jcip-annotations-1.0.jar  : No license information found.
org.clojars.brenton:google-diff-match-patch  : No license information found.

% wc backend-licenses.txt
   33638  299118 2092948 backend-licenses.txt
```

* xml/parse without the strings

* Add tests

* remove comment form

* namespace comments

* readme

* instructions to create backend license files

* Add version information to the build script

need to either yank it out of the separate project or just use it as a
local root. not sure which

todos: move to s3 once i get access and figure out the proper bucket
       copy to a place so it ends up in the jar
       generate frontend versions as well

* Build frontend and backend license files

put them in the jar at
META-INF/leiningen/metabase-core/metabase-core/license-frontend-third-party
META-INF/leiningen/metabase-core/metabase-core/license-backend-third-party

need to be named ^license.* for lein uberjar to pick them up

* Rename and reformat

* remove old stuff

* combine with a newline

* Tests ensure all jars have an identifiable license

* Extra information if backfill is malformed or missing

* correct name for apache2_0 backfill

* print out classpaths in CI

* print

* see whole classpath. it's empty on ee for some reason

* assert they are there

* Get deps before attempting classpath

for some reason the first one fails. but subsequent re-runs work.

* loop on deps until satisfied

* Include message if cannot satisfy

* include all drivers when getting deps

* rearrange ns docstring

* Hoist functions on pom inside of `with-open` on the input streams

* Update to inversion of pom parsing

* Move to nio from java.io

bin/build-mb/deps.edn

-{:paths ["src"]
+{:paths ["src" "resources"]
 
  :deps
  {common/common               {:local/root "../common"}
@@ -9,5 +9,9 @@
  :aliases
  {:test {:extra-paths ["test"]
          :extra-deps  {com.cognitect/test-runner {:git/url "https://github.com/cognitect-labs/test-runner.git"
-                                                  :sha     "209b64504cb3bd3b99ecfec7937b358a879f55c1"}}
+                                                  :sha     "209b64504cb3bd3b99ecfec7937b358a879f55c1"}
+
+                       ;; the following deps are to have jars on the classpath for testing
+                       org.apache.commons/commons-math3 {:mvn/version "3.6.1"}
+                       net.redhogs.cronparser/cron-parser-core {:mvn/version "3.4"}}
          :main-opts   ["-m" "cognitect.test-runner"]}}}

bin/build-mb/resources/BSD.txt

+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

bin/build-mb/resources/CC_2_5.txt

+
+Creative Commons
+Creative Commons Legal Code
+
+Attribution 2.5
+CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE LEGAL SERVICES. DISTRIBUTION OF THIS LICENSE DOES NOT CREATE AN ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES REGARDING THE INFORMATION PROVIDED, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM ITS USE.
+
+License
+
+THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CREATIVE COMMONS PUBLIC LICENSE ("CCPL" OR "LICENSE"). THE WORK IS PROTECTED BY COPYRIGHT AND/OR OTHER APPLICABLE LAW. ANY USE OF THE WORK OTHER THAN AS AUTHORIZED UNDER THIS LICENSE OR COPYRIGHT LAW IS PROHIBITED.
+
+BY EXERCISING ANY RIGHTS TO THE WORK PROVIDED HERE, YOU ACCEPT AND AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE. THE LICENSOR GRANTS YOU THE RIGHTS CONTAINED HERE IN CONSIDERATION OF YOUR ACCEPTANCE OF SUCH TERMS AND CONDITIONS.
+
+1. Definitions
+
+    "Collective Work" means a work, such as a periodical issue, anthology or encyclopedia, in which the Work in its entirety in unmodified form, along with a number of other contributions, constituting separate and independent works in themselves, are assembled into a collective whole. A work that constitutes a Collective Work will not be considered a Derivative Work (as defined below) for the purposes of this License.
+    "Derivative Work" means a work based upon the Work or upon the Work and other pre-existing works, such as a translation, musical arrangement, dramatization, fictionalization, motion picture version, sound recording, art reproduction, abridgment, condensation, or any other form in which the Work may be recast, transformed, or adapted, except that a work that constitutes a Collective Work will not be considered a Derivative Work for the purpose of this License. For the avoidance of doubt, where the Work is a musical composition or sound recording, the synchronization of the Work in timed-relation with a moving image ("synching") will be considered a Derivative Work for the purpose of this License.
+    "Licensor" means the individual or entity that offers the Work under the terms of this License.
+    "Original Author" means the individual or entity who created the Work.
+    "Work" means the copyrightable work of authorship offered under the terms of this License.
+    "You" means an individual or entity exercising rights under this License who has not previously violated the terms of this License with respect to the Work, or who has received express permission from the Licensor to exercise rights under this License despite a previous violation.
+
+2. Fair Use Rights. Nothing in this license is intended to reduce, limit, or restrict any rights arising from fair use, first sale or other limitations on the exclusive rights of the copyright owner under copyright law or other applicable laws.
+
+3. License Grant. Subject to the terms and conditions of this License, Licensor hereby grants You a worldwide, royalty-free, non-exclusive, perpetual (for the duration of the applicable copyright) license to exercise the rights in the Work as stated below:
+
+    to reproduce the Work, to incorporate the Work into one or more Collective Works, and to reproduce the Work as incorporated in the Collective Works;
+    to create and reproduce Derivative Works;
+    to distribute copies or phonorecords of, display publicly, perform publicly, and perform publicly by means of a digital audio transmission the Work including as incorporated in Collective Works;
+    to distribute copies or phonorecords of, display publicly, perform publicly, and perform publicly by means of a digital audio transmission Derivative Works.
+
+    For the avoidance of doubt, where the work is a musical composition:
+        Performance Royalties Under Blanket Licenses. Licensor waives the exclusive right to collect, whether individually or via a performance rights society (e.g. ASCAP, BMI, SESAC), royalties for the public performance or public digital performance (e.g. webcast) of the Work.
+        Mechanical Rights and Statutory Royalties. Licensor waives the exclusive right to collect, whether individually or via a music rights agency or designated agent (e.g. Harry Fox Agency), royalties for any phonorecord You create from the Work ("cover version") and distribute, subject to the compulsory license created by 17 USC Section 115 of the US Copyright Act (or the equivalent in other jurisdictions).
+    Webcasting Rights and Statutory Royalties. For the avoidance of doubt, where the Work is a sound recording, Licensor waives the exclusive right to collect, whether individually or via a performance-rights society (e.g. SoundExchange), royalties for the public digital performance (e.g. webcast) of the Work, subject to the compulsory license created by 17 USC Section 114 of the US Copyright Act (or the equivalent in other jurisdictions).
+
+The above rights may be exercised in all media and formats whether now known or hereafter devised. The above rights include the right to make such modifications as are technically necessary to exercise the rights in other media and formats. All rights not expressly granted by Licensor are hereby reserved.
+
+4. Restrictions.The license granted in Section 3 above is expressly made subject to and limited by the following restrictions:
+
+    You may distribute, publicly display, publicly perform, or publicly digitally perform the Work only under the terms of this License, and You must include a copy of, or the Uniform Resource Identifier for, this License with every copy or phonorecord of the Work You distribute, publicly display, publicly perform, or publicly digitally perform. You may not offer or impose any terms on the Work that alter or restrict the terms of this License or the recipients' exercise of the rights granted hereunder. You may not sublicense the Work. You must keep intact all notices that refer to this License and to the disclaimer of warranties. You may not distribute, publicly display, publicly perform, or publicly digitally perform the Work with any technological measures that control access or use of the Work in a manner inconsistent with the terms of this License Agreement. The above applies to the Work as incorporated in a Collective Work, but this does not require the Collective Work apart from the Work itself to be made subject to the terms of this License. If You create a Collective Work, upon notice from any Licensor You must, to the extent practicable, remove from the Collective Work any credit as required by clause 4(b), as requested. If You create a Derivative Work, upon notice from any Licensor You must, to the extent practicable, remove from the Derivative Work any credit as required by clause 4(b), as requested.
+    If you distribute, publicly display, publicly perform, or publicly digitally perform the Work or any Derivative Works or Collective Works, You must keep intact all copyright notices for the Work and provide, reasonable to the medium or means You are utilizing: (i) the name of the Original Author (or pseudonym, if applicable) if supplied, and/or (ii) if the Original Author and/or Licensor designate another party or parties (e.g. a sponsor institute, publishing entity, journal) for attribution in Licensor's copyright notice, terms of service or by other reasonable means, the name of such party or parties; the title of the Work if supplied; to the extent reasonably practicable, the Uniform Resource Identifier, if any, that Licensor specifies to be associated with the Work, unless such URI does not refer to the copyright notice or licensing information for the Work; and in the case of a Derivative Work, a credit identifying the use of the Work in the Derivative Work (e.g., "French translation of the Work by Original Author," or "Screenplay based on original Work by Original Author"). Such credit may be implemented in any reasonable manner; provided, however, that in the case of a Derivative Work or Collective Work, at a minimum such credit will appear where any other comparable authorship credit appears and in a manner at least as prominent as such other comparable authorship credit.
+
+5. Representations, Warranties and Disclaimer
+
+UNLESS OTHERWISE MUTUALLY AGREED TO BY THE PARTIES IN WRITING, LICENSOR OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTIBILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS, WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU.
+
+6. Limitation on Liability. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7. Termination
+
+    This License and the rights granted hereunder will terminate automatically upon any breach by You of the terms of this License. Individuals or entities who have received Derivative Works or Collective Works from You under this License, however, will not have their licenses terminated provided such individuals or entities remain in full compliance with those licenses. Sections 1, 2, 5, 6, 7, and 8 will survive any termination of this License.
+    Subject to the above terms and conditions, the license granted here is perpetual (for the duration of the applicable copyright in the Work). Notwithstanding the above, Licensor reserves the right to release the Work under different license terms or to stop distributing the Work at any time; provided, however that any such election will not serve to withdraw this License (or any other license that has been, or is required to be, granted under the terms of this License), and this License will continue in full force and effect unless terminated as stated above.
+
+8. Miscellaneous
+
+    Each time You distribute or publicly digitally perform the Work or a Collective Work, the Licensor offers to the recipient a license to the Work on the same terms and conditions as the license granted to You under this License.
+    Each time You distribute or publicly digitally perform a Derivative Work, Licensor offers to the recipient a license to the original Work on the same terms and conditions as the license granted to You under this License.
+    If any provision of this License is invalid or unenforceable under applicable law, it shall not affect the validity or enforceability of the remainder of the terms of this License, and without further action by the parties to this agreement, such provision shall be reformed to the minimum extent necessary to make such provision valid and enforceable.
+    No term or provision of this License shall be deemed waived and no breach consented to unless such waiver or consent shall be in writing and signed by the party to be charged with such waiver or consent.
+    This License constitutes the entire agreement between the parties with respect to the Work licensed here. There are no understandings, agreements or representations with respect to the Work not specified here. Licensor shall not be bound by any additional provisions that may appear in any communication from You. This License may not be modified without the mutual written agreement of the Licensor and You.
+
+Creative Commons is not a party to this License, and makes no warranty whatsoever in connection with the Work. Creative Commons will not be liable to You or any party on any legal theory for any damages whatsoever, including without limitation any general, special, incidental or consequential damages arising in connection to this license. Notwithstanding the foregoing two (2) sentences, if Creative Commons has expressly identified itself as the Licensor hereunder, it shall have all rights and obligations of Licensor.
+
+Except for the limited purpose of indicating to the public that the Work is licensed under the CCPL, neither party will use the trademark "Creative Commons" or any related trademark or logo of Creative Commons without the prior written consent of Creative Commons. Any permitted use will be in compliance with Creative Commons' then-current trademark usage guidelines, as may be published on its website or otherwise made available upon request from time to time.
+
+Creative Commons may be contacted at https://creativecommons.org/.
+« Back to Commons Deed

bin/build-mb/resources/EDL.txt

+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+    Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+    Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+    Neither the name of the Eclipse Foundation, Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

bin/build-mb/resources/EPL.txt

+
+Eclipse Public License - v 1.0
+
+THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
+
+1. DEFINITIONS
+
+"Contribution" means:
+
+a) in the case of the initial Contributor, the initial code and documentation distributed under this Agreement, and
+
+b) in the case of each subsequent Contributor:
+
+i) changes to the Program, and
+
+ii) additions to the Program;
+
+where such changes and/or additions to the Program originate from and are distributed by that particular Contributor. A Contribution 'originates' from a Contributor if it was added to the Program by such Contributor itself or anyone acting on such Contributor's behalf. Contributions do not include additions to the Program which: (i) are separate modules of software distributed in conjunction with the Program under their own license agreement, and (ii) are not derivative works of the Program.
+
+"Contributor" means any person or entity that distributes the Program.
+
+"Licensed Patents" mean patent claims licensable by a Contributor which are necessarily infringed by the use or sale of its Contribution alone or when combined with the Program.
+
+"Program" means the Contributions distributed in accordance with this Agreement.
+
+"Recipient" means anyone who receives the Program under this Agreement, including all Contributors.
+
+2. GRANT OF RIGHTS
+
+a) Subject to the terms of this Agreement, each Contributor hereby grants Recipient a non-exclusive, worldwide, royalty-free copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, distribute and sublicense the Contribution of such Contributor, if any, and such derivative works, in source code and object code form.
+
+b) Subject to the terms of this Agreement, each Contributor hereby grants Recipient a non-exclusive, worldwide, royalty-free patent license under Licensed Patents to make, use, sell, offer to sell, import and otherwise transfer the Contribution of such Contributor, if any, in source code and object code form. This patent license shall apply to the combination of the Contribution and the Program if, at the time the Contribution is added by the Contributor, such addition of the Contribution causes such combination to be covered by the Licensed Patents. The patent license shall not apply to any other combinations which include the Contribution. No hardware per se is licensed hereunder.
+
+c) Recipient understands that although each Contributor grants the licenses to its Contributions set forth herein, no assurances are provided by any Contributor that the Program does not infringe the patent or other intellectual property rights of any other entity. Each Contributor disclaims any liability to Recipient for claims brought by any other entity based on infringement of intellectual property rights or otherwise. As a condition to exercising the rights and licenses granted hereunder, each Recipient hereby assumes sole responsibility to secure any other intellectual property rights needed, if any. For example, if a third party patent license is required to allow Recipient to distribute the Program, it is Recipient's responsibility to acquire that license before distributing the Program.
+
+d) Each Contributor represents that to its knowledge it has sufficient copyright rights in its Contribution, if any, to grant the copyright license set forth in this Agreement.
+
+3. REQUIREMENTS
+
+A Contributor may choose to distribute the Program in object code form under its own license agreement, provided that:
+
+a) it complies with the terms and conditions of this Agreement; and
+
+b) its license agreement:
+
+i) effectively disclaims on behalf of all Contributors all warranties and conditions, express and implied, including warranties or conditions of title and non-infringement, and implied warranties or conditions of merchantability and fitness for a particular purpose;
+
+ii) effectively excludes on behalf of all Contributors all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;
+
+iii) states that any provisions which differ from this Agreement are offered by that Contributor alone and not by any other party; and
+
+iv) states that source code for the Program is available from such Contributor, and informs licensees how to obtain it in a reasonable manner on or through a medium customarily used for software exchange.
+
+When the Program is made available in source code form:
+
+a) it must be made available under this Agreement; and
+
+b) a copy of this Agreement must be included with each copy of the Program.
+
+Contributors may not remove or alter any copyright notices contained within the Program.
+
+Each Contributor must identify itself as the originator of its Contribution, if any, in a manner that reasonably allows subsequent Recipients to identify the originator of the Contribution.
+
+4. COMMERCIAL DISTRIBUTION
+
+Commercial distributors of software may accept certain responsibilities with respect to end users, business partners and the like. While this license is intended to facilitate the commercial use of the Program, the Contributor who includes the Program in a commercial product offering should do so in a manner which does not create potential liability for other Contributors. Therefore, if a Contributor includes the Program in a commercial product offering, such Contributor ("Commercial Contributor") hereby agrees to defend and indemnify every other Contributor ("Indemnified Contributor") against any losses, damages and costs (collectively "Losses") arising from claims, lawsuits and other legal actions brought by a third party against the Indemnified Contributor to the extent caused by the acts or omissions of such Commercial Contributor in connection with its distribution of the Program in a commercial product offering. The obligations in this section do not apply to any claims or Losses relating to any actual or alleged intellectual property infringement. In order to qualify, an Indemnified Contributor must: a) promptly notify the Commercial Contributor in writing of such claim, and b) allow the Commercial Contributor to control, and cooperate with the Commercial Contributor in, the defense and any related settlement negotiations. The Indemnified Contributor may participate in any such claim at its own expense.
+
+For example, a Contributor might include the Program in a commercial product offering, Product X. That Contributor is then a Commercial Contributor. If that Commercial Contributor then makes performance claims, or offers warranties related to Product X, those performance claims and warranties are such Commercial Contributor's responsibility alone. Under this section, the Commercial Contributor would have to defend claims against the other Contributors related to those performance claims and warranties, and if a court requires any other Contributor to pay any damages as a result, the Commercial Contributor must pay those damages.
+
+5. NO WARRANTY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely responsible for determining the appropriateness of using and distributing the Program and assumes all risks associated with its exercise of rights under this Agreement , including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and unavailability or interruption of operations.
+
+6. DISCLAIMER OF LIABILITY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7. GENERAL
+
+If any provision of this Agreement is invalid or unenforceable under applicable law, it shall not affect the validity or enforceability of the remainder of the terms of this Agreement, and without further action by the parties hereto, such provision shall be reformed to the minimum extent necessary to make such provision valid and enforceable.
+
+If Recipient institutes patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Program itself (excluding combinations of the Program with other software or hardware) infringes such Recipient's patent(s), then such Recipient's rights granted under Section 2(b) shall terminate as of the date such litigation is filed.
+
+All Recipient's rights under this Agreement shall terminate if it fails to comply with any of the material terms or conditions of this Agreement and does not cure such failure in a reasonable period of time after becoming aware of such noncompliance. If all Recipient's rights under this Agreement terminate, Recipient agrees to cease use and distribution of the Program as soon as reasonably practicable. However, Recipient's obligations under this Agreement and any licenses granted by Recipient relating to the Program shall continue and survive.
+
+Everyone is permitted to copy and distribute copies of this Agreement, but in order to avoid inconsistency the Agreement is copyrighted and may only be modified in the following manner. The Agreement Steward reserves the right to publish new versions (including revisions) of this Agreement from time to time. No one other than the Agreement Steward has the right to modify this Agreement. The Eclipse Foundation is the initial Agreement Steward. The Eclipse Foundation may assign the responsibility to serve as the Agreement Steward to a suitable separate entity. Each new version of the Agreement will be given a distinguishing version number. The Program (including Contributions) may always be distributed subject to the version of the Agreement under which it was received. In addition, after a new version of the Agreement is published, Contributor may elect to distribute the Program (including its Contributions) under the new version. Except as expressly stated in Sections 2(a) and 2(b) above, Recipient receives no rights or licenses to the intellectual property of any Contributor under this Agreement, whether expressly, by implication, estoppel or otherwise. All rights in the Program not expressly granted under this Agreement are reserved.
+
+This Agreement is governed by the laws of the State of New York and the intellectual property laws of the United States of America. No party to this Agreement will bring a legal action under this Agreement more than one year after the cause of action arose. Each party waives its rights to a jury trial in any resulting litigation.

bin/build-mb/resources/GPL1_1.txt

+                   GNU GENERAL PUBLIC LICENSE
+                     Version 1, February 1989
+
+ Copyright (C) 1989 Free Software Foundation, Inc.
+                    51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The license agreements of most software companies try to keep users
+at the mercy of those companies.  By contrast, our General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  The
+General Public License applies to the Free Software Foundation's
+software and to any other program whose authors commit to using it.
+You can use it for your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Specifically, the General Public License is designed to make
+sure that you have the freedom to give away or sell copies of free
+software, that you receive source code or can get it if you want it,
+that you can change the software or use pieces of it in new free
+programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of a such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must tell them their rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License Agreement applies to any program or other work which
+contains a notice placed by the copyright holder saying it may be
+distributed under the terms of this General Public License.  The
+"Program", below, refers to any such program or work, and a "work based
+on the Program" means either the Program or any work containing the
+Program or a portion of it, either verbatim or with modifications.  Each
+licensee is addressed as "you".
+
+  1. You may copy and distribute verbatim copies of the Program's source
+code as you receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice and
+disclaimer of warranty; keep intact all the notices that refer to this
+General Public License and to the absence of any warranty; and give any
+other recipients of the Program a copy of this General Public License
+along with the Program.  You may charge a fee for the physical act of
+transferring a copy.
+
+  2. You may modify your copy or copies of the Program or any portion of
+it, and copy and distribute such modifications under the terms of Paragraph
+1 above, provided that you also do the following:
+
+    a) cause the modified files to carry prominent notices stating that
+    you changed the files and the date of any change; and
+
+    b) cause the whole of any work that you distribute or publish, that
+    in whole or in part contains the Program or any part thereof, either
+    with or without modifications, to be licensed at no charge to all
+    third parties under the terms of this General Public License (except
+    that you may choose to grant warranty protection to some or all
+    third parties, at your option).
+
+    c) If the modified program normally reads commands interactively when
+    run, you must cause it, when started running for such interactive use
+    in the simplest and most usual way, to print or display an
+    announcement including an appropriate copyright notice and a notice
+    that there is no warranty (or else, saying that you provide a
+    warranty) and that users may redistribute the program under these
+    conditions, and telling the user how to view a copy of this General
+    Public License.
+
+    d) You may charge a fee for the physical act of transferring a
+    copy, and you may at your option offer warranty protection in
+    exchange for a fee.
+
+Mere aggregation of another independent work with the Program (or its
+derivative) on a volume of a storage or distribution medium does not bring
+the other work under the scope of these terms.
+
+  3. You may copy and distribute the Program (or a portion or derivative of
+it, under Paragraph 2) in object code or executable form under the terms of
+Paragraphs 1 and 2 above provided that you also do one of the following:
+
+    a) accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of
+    Paragraphs 1 and 2 above; or,
+
+    b) accompany it with a written offer, valid for at least three
+    years, to give any third party free (except for a nominal charge
+    for the cost of distribution) a complete machine-readable copy of the
+    corresponding source code, to be distributed under the terms of
+    Paragraphs 1 and 2 above; or,
+
+    c) accompany it with the information you received as to where the
+    corresponding source code may be obtained.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form alone.)
+
+Source code for a work means the preferred form of the work for making
+modifications to it.  For an executable file, complete source code means
+all the source code for all modules it contains; but, as a special
+exception, it need not include source code for modules which are standard
+libraries that accompany the operating system on which the executable
+file runs, or for standard header files or definitions files that
+accompany that operating system.
+
+  4. You may not copy, modify, sublicense, distribute or transfer the
+Program except as expressly provided under this General Public License.
+Any attempt otherwise to copy, modify, sublicense, distribute or transfer
+the Program is void, and will automatically terminate your rights to use
+the Program under this License.  However, parties who have received
+copies, or rights to use copies, from you under this General Public
+License will not have their licenses terminated so long as such parties
+remain in full compliance.
+
+  5. By copying, distributing or modifying the Program (or any work based
+on the Program) you indicate your acceptance of this license to do so,
+and all its terms and conditions.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the original
+licensor to copy, distribute or modify the Program subject to these
+terms and conditions.  You may not impose any further restrictions on the
+recipients' exercise of the rights granted herein.
+
+  7. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of the license which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+the license, you may choose any version ever published by the Free Software
+Foundation.
+
+  8. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  9. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  10. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+        Appendix: How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to humanity, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these
+terms.
+
+  To do so, attach the following notices to the program.  It is safest to
+attach them to the start of each source file to most effectively convey
+the exclusion of warranty; and each file should have at least the
+"copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) 19yy  <name of author>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 1, or (at your option)
+    any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program; if not, write to the Free Software
+    Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA  02110-1301 USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) 19xx name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the
+appropriate parts of the General Public License.  Of course, the
+commands you use may be called something other than `show w' and `show
+c'; they could even be mouse-clicks or menu items--whatever suits your
+program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the
+  program `Gnomovision' (a program to direct compilers to make passes
+  at assemblers) written by James Hacker.
+
+  <signature of Ty Coon>, 1 April 1989
+  Ty Coon, President of Vice
+
+That's all there is to it!

bin/build-mb/resources/MIT.txt

+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

bin/build-mb/resources/apache2_0.txt

+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

bin/build-mb/resources/overrides.edn

+{:override/group
+ {"org.clojure"                      {:resource "EPL.txt"},
+  "io.netty"                         {:resource "apache2_0.txt"},
+  "org.opensaml"                     {:resource "apache2_0.txt"},
+  "com.google.guava"                 {:resource "apache2_0.txt"},
+  "com.fasterxml.jackson.dataformat" {:resource "apache2_0.txt"},
+  "com.onelogin"                     {:resource "MIT.txt"},
+  "xalan"                            {:resource "apache2_0.txt"}
+  "org.apache.hadoop"                {:resource "apache2_0.txt"}
+  "org.ow2.asm"                      {:resource "BSD.txt"}
+  "org.eclipse.jetty"                {:resource "apache2_0.txt"}}
+
+ "com.google.http-client"     {"google-http-client"          {:resource "apache2_0.txt"}
+                               "google-http-client-jackson2" {:resource "apache2_0.txt"}}
+ "com.google.api-client"      {"google-api-client" {:resource "apache2_0.txt"}}
+ "com.google.oauth-client"    {"google-oauth-client" {:resource "apache2_0.txt"}}
+ "org.mortbay.jetty"          {"jetty"          {:resource "apache2_0.txt"}
+                               "jetty-util"     {:resource "apache2_0.txt"}
+                               "jetty-security" {:resource "apache2_0.txt"}}
+ "com.jolbox"                 {"bonecp" {:resource "apache2_0.txt"}}
+ "org.eclipse.jetty"          {"jetty-webapp" {:resource "EPL.txt"}}
+ "org.fusesource.leveldbjni"  {"leveldbjni-all" {:resource "BSD.txt"}}
+ "com.sun.jersey"             {"jersey-server"  {:resource "apache2_0.txt"}
+                               "jersey-core"    {:resource "GPL1_1.txt"}
+                               "jersey-json"    {:resource "GPL1_1.txt"}
+                               "jersey-client"  {:resource "apache2_0.txt"}
+                               "jersey-servlet" {:resource "GPL1_1.txt"}}
+ "com.sun.jersey.contribs"    {"jersey-guice" {:resource "GPL1_1.txt"}}
+ "com.thoughtworks.paranamer" {"paranamer" {:resource "BSD.txt"}}
+ "javax.servlet.jsp"          {"jsp-api" {:resource "GPL2_0.txt"}}
+
+ "org.openid4java"        {"openid4java-nodeps" {:resource "apache2_0.txt"}},
+ "net.redhogs.cronparser" {"cron-parser-core" {:resource "MIT.txt"}},
+ "org.slf4j"              {"slf4j-api" {:resource "MIT.txt"}},
+ "amalloy"                {"ring-gzip-middleware" {:resource "MIT.txt"}},
+ "jakarta.activation"     {"jakarta.activation-api" {:resource "EDL.txt"}},
+ "net.jcip"               {"jcip-annotations" {:resource "CC_2_5.txt"}},
+ "hiccup"                 {"hiccup" {:resource "EPL.txt"}},
+ "jakarta.xml.bind"       {"jakarta.xml.bind-api" {:resource "EDL.txt"}},
+ "net.shibboleth.utilities"
+ {"java-support" {:resource "apache2_0.txt"}},
+ "io.dropwizard.metrics"  {"metrics-core" {:resource "apache2_0.txt"}},
+ "stencil"                {"stencil" {:resource "EPL.txt"}},
+ "org.antlr"              {"antlr-runtime" {:resource "BSD.txt"}},
+ "de.rototor.pdfbox"      {"graphics2d" {:resource "apache2_0.txt"}},
+ "colorize"               {"colorize" {:resource "EPL.txt"}},
+ "org.liquibase"          {"liquibase-core" {:resource "apache2_0.txt"}},
+ "org.quartz-scheduler"   {"quartz" {:resource "apache2_0.txt"}}}

bin/build-mb/src/build.clj

 (ns build
   (:require [build-drivers :as build-drivers]
+            [build.licenses :as license]
             [build.version-info :as version-info]
+            [clojure.edn :as edn]
+            [clojure.java.io :as io]
             [clojure.string :as str]
             [environ.core :as env]
             [flatland.ordered.map :as ordered-map]
@@ -54,6 +57,37 @@
     (u/assert-file-exists uberjar-filename)
     (u/announce "Uberjar built successfully.")))
 
+(defn- build-backend-licenses-file! [edition]
+  {:pre [(#{:oss :ee} edition)]}
+  (let [classpath-and-logs        (u/sh {:dir    u/project-root-directory
+                                         :quiet? true}
+                                        "lein"
+                                        "with-profile" (str \- "dev"
+                                                            (str \, \+ (name edition))
+                                                            \,"+include-all-drivers")
+                                        "classpath")
+        classpath                 (last
+                                   classpath-and-logs)
+        output-filename           (u/filename u/project-root-directory "license-backend-third-party")
+        {:keys [with-license
+                without-license]} (license/generate {:classpath       classpath
+                                                     :backfill        (edn/read-string
+                                                                       (slurp (io/resource "overrides.edn")))
+                                                     :output-filename output-filename
+                                                     :report?         false})]
+    (when (seq without-license)
+      (run! (comp (partial u/error "Missing License: %s") first)
+            without-license))
+    (u/announce "License information generated at %s" output-filename)))
+
+(defn- build-frontend-licenses-file!
+  []
+  (let [license-text (str/join \newline
+                               (u/sh {:dir    u/project-root-directory
+                                      :quiet? true}
+                                     "yarn" "licenses" "generate-disclaimer"))]
+    (spit (u/filename u/project-root-directory "license-frontend-third-party") license-text)))
+
 (def all-steps
   (ordered-map/ordered-map
    :version      (fn [{:keys [edition version]}]
@@ -64,6 +98,10 @@
                    (build-frontend! edition))
    :drivers      (fn [{:keys [edition]}]
                    (build-drivers/build-drivers! edition))
+   :backend-licenses (fn [{:keys [edition]}]
+                       (build-backend-licenses-file! edition))
+   :frontend-licenses (fn [{:keys []}]
+                        (build-frontend-licenses-file!))
    :uberjar      (fn [{:keys [edition]}]
                    (build-uberjar! edition))))
 

bin/build-mb/src/build/licenses.clj

+(ns build.licenses
+  "Functionality to take a classpath and generate a file containing all libraries and their respective licenses.
+  Intended to be called from from the command line like:
+
+  clj -X mb.license/process :classpath a-classpath :output-filename a-filename
+
+  or from clojure code like:
+  ```
+  (license/process {:classpath classpath
+                    :backfill (edn/read-string (slurp (io/resource \"overrides.edn\")))
+                    :output-filename (.getAbsolutePath output-file)
+                    :report? false})
+  ```
+
+  Allows for optional backfill, either edn or a filename that is edn. Backfill should be of the form
+
+  {\"group\" {\"artifact\" \"license text\"}
+   \"group\" {\"artifact\" {:resource \"filename-of-license\"}}
+
+  :override/group {\"group\" \"license\"
+                   \"group\" {:resource \"filename-of-license\"}}
+  }
+
+  At the moment assumes a leiningen classpath which is primarily jars and your own source paths, so only detects
+  license information from jars. In the future a strategy and heuristics could be determined for when source is
+  available from local roots and git dependencies."
+  (:require [clojure.data.xml :as xml]
+            [clojure.edn :as edn]
+            [clojure.java.io :as io]
+            [clojure.string :as str])
+  (:import (java.nio.file Files FileSystem FileSystems FileVisitOption LinkOption OpenOption Path Paths)))
+
+(set! *warn-on-reflection* true)
+
+(def classpath-separator (System/getProperty "path.separator"))
+
+(defn jar-file? [filename]
+  (str/ends-with? filename "jar"))
+
+(def tag-name (comp keyword (fnil name "") :tag))
+(def ^:private tag-content (juxt tag-name (comp first :content)))
+
+(defn pom->coordinates [pom-xml]
+  (let [coords (->> pom-xml
+                    :content
+                    (filter #(#{:groupId :artifactId :version} (tag-name %)))
+                    (map tag-content)
+                    (into {}))
+        parent (->> pom-xml
+                    :content
+                    (filter #(#{:parent} (tag-name %)))
+                    first
+                    :content
+                    (keep tag-content)
+                    (into {}))]
+    {:group (or (:groupId coords) (:groupId parent))
+     :artifact (:artifactId coords)
+     :version (or (:version coords) (:version parent))}))
+
+(defn pom->licenses [pom-xml]
+  (let [licenses (some->> pom-xml
+                          :content
+                          (filter #(#{:licenses} (tag-name %)))
+                          first
+                          :content
+                          first
+                          :content
+                          (map tag-content)
+                          (into {}))]
+    licenses))
+
+(defn ->BiPredicate [f]
+  (reify java.util.function.BiPredicate
+    (test [_ x y]
+      (f x y))))
+
+(def path-options (into-array String []))
+(def filevisit-options (into-array FileVisitOption []))
+(def link-options (into-array LinkOption []))
+(def open-options (into-array OpenOption []))
+
+(defn determine-pom
+  "Produce a pom path from a jar. Looks first for a pom adjacent to the jar, and then finds all files that end with
+  pom.xml in the jar, returning the first.
+
+  In the future if we switch to deps.edn we can start with a canonical deps map and go from a proper dependency list
+  to artifacts. This would allow accessing the pom directly rather than searching for it. To optimize, we look for the
+  pom adjacent to the jar so we don't enumerate every jar."
+  [jar-filename ^FileSystem jar-fs]
+  (or (let [adjacent-pom (Paths/get (str/replace jar-filename #"\.jar" ".pom")
+                                    path-options)]
+        (when (Files/exists adjacent-pom link-options)
+          adjacent-pom))
+      (let [jar-root (.getPath jar-fs "/" path-options)
+            ^java.util.function.BiPredicate
+            pred (->BiPredicate (fn [^Path path _]
+                                  (str/ends-with? (str path) "pom.xml")))]
+        (.. (Files/find jar-root Integer/MAX_VALUE pred filevisit-options)
+            findFirst
+            (orElse nil)))
+      (throw (ex-info "Cannot locate pom" {:jar jar-filename}))))
+
+(defn do-with-path-is
+  "Open an inputstream on `path` and call `f` with the inputstream as an argument. Function `f` should not be lazy."
+  [^Path path f]
+  (with-open [is (Files/newInputStream path open-options)]
+    (f is)))
+
+(def ^:private license-file-names
+  ["LICENSE" "LICENSE.txt" "META-INF/LICENSE"
+   "META-INF/LICENSE.txt" "license/LICENSE"])
+
+(defn license-from-jar
+  "Look inside of a jar filesystem for license files."
+  [^FileSystem jar-fs]
+  (->> license-file-names
+       (map #(.getPath jar-fs % path-options))
+       (filter #(Files/exists % link-options))
+       first))
+
+(defn license-from-backfill
+  "Look in the backfill information for license information."
+  [{:keys [group artifact]} backfill]
+  (if-let [license (some #(get-in backfill %)
+                         [[group artifact]
+                          [:override/group group]])]
+    (if (string? license)
+      license
+      (if-let [resource (io/resource (:resource license))]
+        (slurp resource)
+        (throw (ex-info (str "Missing license for " artifact)
+                        {:group    group
+                         :artifact artifact
+                         :backfill license}))))))
+
+(defn discern-license-and-coords
+  "Returns a tuple of [jar-filename {:coords :license [:error]}. Error is optional. License will be a string of license
+  text, coords a map with group and artifact."
+  [^String jar-filename backfill]
+  (let [jar-path (Paths/get jar-filename path-options)]
+    (if-not (Files/exists jar-path link-options)
+      [jar-filename {:error "Jar does not exist"}]
+      (try
+        (with-open [jar-fs (FileSystems/newFileSystem jar-path nil)]
+          (let [pom-path             (determine-pom jar-filename jar-fs)
+                license-path         (license-from-jar jar-fs)
+                [coords pom-license] (do-with-path-is pom-path
+                                                      (comp (juxt pom->coordinates pom->licenses)
+                                                            #(xml/parse % :skip-whitespace true)))
+                license              (or (when license-path
+                                           (with-open [is (Files/newInputStream license-path open-options)]
+                                             (slurp is)))
+                                         (license-from-backfill coords backfill)
+                                         (let [{:keys [name url]} pom-license]
+                                           (when name (str name ": " url))))]
+            [jar-filename (cond-> {:coords coords :license license}
+                            (not (and license coords))
+                            (assoc :error "Error determining license or coords"))]))
+        (catch Exception e
+          [jar-filename {:error e}])))))
+
+(defn write-license [success-os [_jar {:keys [coords license]}]]
+  (let [{:keys [group artifact]} coords]
+    (binding [*out* success-os]
+      (println "The following software may be included in this product: "
+               group ":" artifact
+               ". This software contains the following license and notice below:")
+      (println "\n")
+      (println license)
+      (println "\n\n----------\n"))))
+
+(defn report-missing [error-os [jar {:keys [coords]}]]
+  (let [{:keys [group artifact]} coords
+        dep-name (or (when artifact
+                       (str (when group (str group ":")) artifact))
+                     jar)]
+    (binding [*out* error-os]
+      (println dep-name " : No license information found."))))
+
+(defn process* [{:keys [classpath-entries backfill]}]
+  (let [info     (map #(discern-license-and-coords % backfill) classpath-entries)
+
+        categorized (group-by (comp (complement #(contains? % :error)) second) info)]
+    {:with-license    (categorized true)
+     :without-license (categorized false)}))
+
+(defn generate
+  "Process a classpath, creating a file of all license information, writing to `:output-filename`. Backfill is a clojure
+  data structure or a filename of an edn file of a clojure datastructure providing for backfilling license information
+  if it is not discernable from the jar. Should be of the form (note keys are strings not symbols)
+
+  {\"group\" {\"artifact\" \"license text\"}
+   \"group\" {\"artifact\" {:resource \"filename-of-license\"}}
+
+  :override/group {\"group\" \"license\"
+                   \"group\" {:resource \"filename-of-license\"}}
+  }
+
+  Algorithm is:
+    - check jar for license file at a few different standard paths. If present keep this text.
+    - look in provided backfill information for license text or a resource containing the license text
+    - Look in pom file next to jar or in jar for license information. If found this information is used, it is not
+      expanded into a full license text.
+
+  Reports if `:report?` is true (the default). Writes missing license information to *err* and summary of identified licenses to *out*.
+
+  Returns a map
+  {:with-license [ [jar-filename {:coords {:group :artifact :version} :license <text>}] ...]
+   :without-license [ [jar-filename {:coords {:group :artifact :version} :error <text>}] ... ]}"
+  [{:keys [classpath backfill output-filename report?] :or {report? true}}]
+  (let [backfill (if (string? backfill)
+                   (edn/read-string (slurp backfill))
+                   (or backfill {}))
+        entries  (->> (str/split classpath (re-pattern classpath-separator))
+                      (filter jar-file?))]
+    (let [{:keys [with-license without-license] :as license-info}
+          (process* {:classpath-entries     entries
+                     :backfill              backfill})]
+      (when (seq with-license)
+        (with-open [os (io/writer output-filename)]
+          (run! #(write-license os %) with-license)))
+      (when report?
+        (when (seq without-license)
+          (run! #(report-missing *err* %) without-license))
+        (when (seq with-license)
+          (println "License information for" (count with-license) "libraries written to "
+                   output-filename)
+          ;; we call this from the build script. if we switch to the shell we can reenable this and figure out the
+          ;; best defaults. Want to make sure we never kill our build script
+          #_(System/exit (if (seq without-license) 1 0))))
+      license-info)))
+
+;; clj -X build.licenses/generate :classpath \"$(cd ../.. && lein with-profile -dev,+ee,+include-all-drivers classpath | tail -n1)\" :backfill "\"resources/overrides.edn\"" :output-filename "\"backend-licenses-ee.txt\""

bin/build-mb/test/build/licenses_test.clj

+(ns build.licenses-test
+  (:require [build.licenses :as lic]
+            [clojure.data.xml :as xml]
+            [clojure.edn :as edn]
+            [clojure.java.io :as io]
+            [clojure.string :as str]
+            [clojure.test :refer [deftest is run-tests testing]]
+            [metabuild-common.core :as u])
+  (:import (java.io StringReader StringWriter)
+           (java.nio.file Files FileSystems LinkOption Paths)))
+
+(def classpath-urls (str/split (System/getProperty "java.class.path")
+                               (re-pattern lic/classpath-separator)))
+
+(defn jar-filename-from-cp
+  [jar-filename classpath-urls]
+  (let [[x & rst :as found] (filter #(when (str/includes? % jar-filename) %) classpath-urls)]
+    (cond (seq rst) (throw (ex-info (str "Multiple jars found for " jar-filename)
+                                    {:filename jar-filename
+                                     :found    found}))
+          (not x)   (throw (ex-info (str "No results found for " jar-filename)
+                                    {:filename jar-filename}))
+          x         x)))
+
+(defn parse [rdr] (xml/parse rdr :skip-whitespace true))
+
+(def clojure-xml "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
+<project xmlns=\"http://maven.apache.org/POM/4.0.0\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:schemaLocation=\"http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd\">
+  <modelVersion>4.0.0</modelVersion>
+  <groupId>org.clojure</groupId>
+  <artifactId>clojure</artifactId>
+  <name>clojure</name>
+  <packaging>jar</packaging>
+  <version>1.10.3</version>
+
+  <licenses>
+    <license>
+      <name>Eclipse Public License 1.0</name>
+      <url>http://opensource.org/licenses/eclipse-1.0.php</url>
+      <distribution>repo</distribution>
+    </license>
+  </licenses>
+</project>"
+  )
+
+(def clojure-jdbc-xml "<?xml version=\"1.0\" encoding=\"utf-8\"?>
+<project xmlns=\"http://maven.apache.org/POM/4.0.0\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:schemaLocation=\"http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd\">
+  <modelVersion>4.0.0</modelVersion>
+  <artifactId>java.jdbc</artifactId>
+  <version>0.7.11</version>
+  <name>java.jdbc</name>
+
+  <parent>
+    <groupId>org.clojure</groupId>
+    <artifactId>pom.contrib</artifactId>
+    <version>0.2.2</version>
+  </parent>
+</project>"
+  )
+
+(deftest pom->coordinates-test
+  (testing "Parses version information from pom"
+    (testing "When group information is top level"
+      (let [xml (parse (StringReader. clojure-xml))]
+        (is (= {:group    "org.clojure"
+                :artifact "clojure"
+                :version  "1.10.3"}
+               (lic/pom->coordinates xml)))))
+    (testing "When group informatoin is under the parent tag"
+     (let [xml (parse (StringReader. clojure-jdbc-xml))]
+       (is (= {:group    "org.clojure"
+               :artifact "java.jdbc"
+               :version  "0.7.11"}
+              (lic/pom->coordinates xml)))))))
+
+(defn jar->path [filename]
+  (let [path (Paths/get filename (into-array String []))]
+    (if (Files/exists path (into-array LinkOption []))
+      path
+      (throw (ex-data (str "Jar " filename " not found") {:filename filename})))))
+
+(defn jar [filename]
+  (jar->path (jar-filename-from-cp filename classpath-urls)))
+
+(deftest pom->license-test
+  (testing "Can find license information from the pom"
+    (testing "If present"
+      (let [xml (parse (StringReader. clojure-xml))]
+        (is (= {:name         "Eclipse Public License 1.0"
+                :url          "http://opensource.org/licenses/eclipse-1.0.php"
+                :distribution "repo"}
+               (lic/pom->licenses xml))))
+      (let [jar-filename (jar-filename-from-cp "org/clojure/clojure" classpath-urls)
+            jar-path (Paths/get jar-filename (into-array String []))]
+        (with-open [jar-fs (FileSystems/newFileSystem jar-path nil)]
+          (let [pom-path (lic/determine-pom jar-filename jar-fs)]
+            (is (= {:name         "Eclipse Public License 1.0"
+                    :url          "http://opensource.org/licenses/eclipse-1.0.php"
+                    :distribution "repo"}
+                   (lic/do-with-path-is pom-path (comp lic/pom->licenses parse))))))))
+    (testing "Returning nil if not present"
+      (let [xml (parse (StringReader. clojure-jdbc-xml))]
+        (is (nil? (lic/pom->licenses xml)))))))
+
+(deftest license-from-jar-test
+  (letfn [(license-path [j f]
+            (with-open [jar-fs (FileSystems/newFileSystem (jar j) nil)]
+              (some-> (lic/license-from-jar jar-fs)
+                      f)))
+          (first-line [path]
+            (lic/do-with-path-is path (fn [is]
+                                        (->> (slurp is)
+                                             str/split-lines
+                                             (drop-while str/blank?)
+                                             first
+                                             str/trim))))]
+    (testing "Can find license information bundled in the jar"
+      (is (= "META-INF/LICENSE.txt"
+             (license-path "commons/commons-math3" str)))
+      (is (= "Apache License"
+             (license-path "commons/commons-math3" first-line))))
+    (testing "Nil if not present"
+      (is (nil? (license-path "cronparser/cron-parser-core" identity))))))
+
+(deftest license-from-backfill-test
+  (let [backfill {"a" {"a" "License Information"}
+                  "b" {"b" {:resource "MIT.txt"}}
+                  :override/group
+                  {"group-y" "License Information"
+                   "group-z" {:resource "EPL.txt"}}}]
+    (doseq [[coords expected-license]
+            [[{:group "a" :artifact "a"} "License Information"]
+             [{:group "b" :artifact "b"} "Permission is hereby granted"]
+             [{:group "group-y" :artifact "literally-any-package"} "License Information"]
+             [{:group "group-z" :artifact "literally-any-package"} "\nEclipse Public License"]]]
+      (let [license (lic/license-from-backfill coords backfill)]
+        (is (not (str/blank? license)))
+        (is (str/starts-with? license expected-license))))))
+
+(deftest process*-test
+  (testing "categorizes jar entries"
+    (let [jars            (map #(jar-filename-from-cp % classpath-urls)
+                               ["org/clojure/clojure"
+                                "commons/commons-math3"
+                                "cronparser/cron-parser-core"])
+          normalize-entry (fn [[jar {:keys [coords license error]}]]
+                            [((juxt :group :artifact) coords)
+                             (cond-> {:license (not (str/blank? license))}
+                               error (assoc :error error))])
+          normalize       (fn [results]
+                            (into {}
+                                  (map (fn [[k v]]
+                                         [k (into {} (map normalize-entry) v)]))
+                                  results))]
+      (testing "without backfill"
+        (is (= {:with-license
+                {["org.clojure" "clojure"]              {:license true}
+                 ["org.apache.commons" "commons-math3"] {:license true}}
+                :without-license
+                {["net.redhogs.cronparser" "cron-parser-core"]
+                 {:license false :error "Error determining license or coords"}}}
+               (normalize (lic/process* {:classpath-entries jars
+                                         :backfill          {}})))))
+      (testing "with backfill by group and artifact"
+        (is (= {:with-license
+                {["org.clojure" "clojure"]                     {:license true}
+                 ["org.apache.commons" "commons-math3"]        {:license true}
+                 ["net.redhogs.cronparser" "cron-parser-core"] {:license true}}
+                :without-license
+                {}}
+               (normalize (lic/process* {:classpath-entries jars
+                                         :backfill
+                                         {"net.redhogs.cronparser"
+                                          {"cron-parser-core" "license"}}})))))
+      (testing "with backfill by group override"
+        (is (= {:with-license
+                {["org.clojure" "clojure"]                     {:license true}
+                 ["org.apache.commons" "commons-math3"]        {:license true}
+                 ["net.redhogs.cronparser" "cron-parser-core"] {:license true}}
+                :without-license
+                {}}
+               (normalize (lic/process* {:classpath-entries jars
+                                         :backfill
+                                         {:override/group
+                                          {"net.redhogs.cronparser" "license"}}}))))))))
+
+(deftest write-license-test
+  (is (= (str "The following software may be included in this product:  a : a . "
+              "This software contains the following license and notice below:\n\n\n"
+              "license text\n\n\n----------\n\n")
+         (let [os (StringWriter.)]
+           (lic/write-license os ["jar" {:coords  {:group "a" :artifact "a"}
+                                         :license "license text"}])
+           (str os)))))
+
+(defn- loop-until-success [f max step-name]
+  (loop [n 0]
+    (let [success? (try
+                    (do (f) true)
+                    (catch Exception _ false))]
+      (cond success? ::done
+            (and (not success?) (< n max)) (recur (inc n))
+            :else (throw (ex-info (str "Could not succeed " step-name) {:max-attempts max}))))))
+
+(deftest all-deps-have-licenses
+  (testing "All deps on the classpath have licenses"
+    (loop-until-success #(u/sh {:dir u/project-root-directory} "lein" "with-profile" "+include-all-drivers,+oss,+ee" "deps") 3 "download deps")
+    (doseq [edition [:oss :ee]]
+      (let [classpath (u/sh {:dir    u/project-root-directory
+                             :quiet? true}
+                            "lein"
+                            "with-profile" (str \- "dev"
+                                                (str \, \+ (name edition))
+                                                \,"+include-all-drivers")
+                            "classpath")
+            classpath-entries (->> (str/split (last classpath) (re-pattern lic/classpath-separator))
+                                   (filter lic/jar-file?))]
+        (let [results (lic/process* {:classpath-entries classpath-entries
+                                     :backfill  (edn/read-string
+                                                 (slurp (io/resource "overrides.edn")))})]
+          (is (nil? (:without-license results)) "Some deps don't have identifiable licenses")
+          (is (= (set classpath-entries)
+                 (into #{} (->> results :with-license (map first))))))
+        (is (some? (:without-license
+                    (lic/process* {:classpath-entries classpath-entries
+                                   :backfill  {}}))))))))
+(comment
+  (run-tests)
+  (binding [clojure.test/*test-out* *out*] (run-tests))
+  )

bin/common/src/metabuild_common/core.clj

@@ -46,7 +46,8 @@
   filename
   find-files
   nio-path
-  project-root-directory]
+  project-root-directory
+  temporary-file]
 
  [input
   interactive?

bin/common/src/metabuild_common/files.clj

@@ -130,3 +130,12 @@
   "Get the size, in bytes, of the file at `path`."
   ^Long [^String path]
   (Files/size (nio-path path)))
+
+(defn temporary-file
+  "Create a temporary file with prefix and suffix. Default to delete on exit."
+  ([prefix suffix] (temporary-file prefix suffix true))
+  ([prefix suffix delete-on-exit?]
+   (let [file (File/createTempFile prefix suffix)]
+     (when delete-on-exit?
+       (.deleteOnExit file))
+     file)))