The following is a simple type of single-level Software-BOM for all official open source products of Catena-X Knowledge Agents.
- Product - The name of the Epic/Product (* for all)
- Component - The specific sub-component of the Epic/Product (* for all)
- Library/Module - The library or module that the Product/Component is depending on
- Stage - The kind of dependency
- Compile - The library is needed to compile the source code of the component into the target artifact (runtime)
- Test - The library is needed to test the target artifact
- Packaging - The library is needed to test the target artifact before, while and/or after packaging it
- Runtime - The library is shipped as a part of the target artifact (runtime)
- Provided - The library is not shipped as a part of the target artifact, but needed in it runtime
- All - The library is needed at all Stages
- Version - the version of the library that the component is dependant upon
- License - the license identifier
- Comment - any further remarks on the kind of dependency
| Component | Library/Module | Version | Stage | License | Comment |
|---|---|---|---|---|---|
| * | Apache Maven | >=3.8 | Compile + Test + Packaging | Apache License 2.0 | |
| * | Docker Engine | >=20.10.17 | Packaging + Provided | Apache License 2.0 | |
| * | kubernetes/helm | >=1.20/3.9 | Provided | Apache License 2.0 | |
| * | Python | >=3.9 | Test + Packaging + Provided | Zero Clause BSD | |
| * | Java Runtime Environment (JRE) | >=11 | Test + Provided | * | License (GPL, BCL, ...) depends on choosen runtime. |
| * | Java Development Kit (JDK) | >=11 | Compile + Packaging | * | License (GPL, BCL, ...) depends on choosen kit. |
| * | Junit Jupiter | >=5 | Test | MIT | |
| * | EDC | >=0.1.0 | All | Apache License 2.0 | |
| * | Tractus-X EDC | >=0.4.1 | All | Apache License 2.0 | |
| EDC Agent Plane | Apache Jena Fuseki | >=4.6.0 | All | Apache License 2.0 | |
| EDC Agent Plane | Jakarta RESTful Web Services | >=3.1.0 | All | Eclipse Public License (2.0) | |
| EDC Agent Plane | Javax Servlet API | >=4.0.1 | All | Common Development & Distribution License | |
| EDC Agent Plane | Jakarta Servlet API | >=5.0.2 | All | Eclipse Public License (2.0) | |
| EDC Agent Plane | Nimbus JOSE-JWT | >=9.31 | All | Apache License 2.0 | |
| EDC Agent Plane | Azure Identity | >=1.9.0 | All | MIT | |
| EDC Agent Plane | Azure Keyvault Secrets | >=4.6.2 | All | MIT | |
| EDC Agent Plane | SLF4J | >=2.0.7 | All | MIT | |
| EDC Agent Plane | OK Http | >=4.11.0 | All | Apache License 2.0 | |
| EDC Agent Plane | Failsafe | >=3.3.1 | All | Apache License 2.0 | |
| EDC Agent Plane | Mockito | >=5.2.0 | Test | MIT |