The following is a simple type of single-level Software-BOM for all official open source products of Catena-X Knowledge Agents.
- Product - The name of the Epic/Product (* for all)
- Component - The specific sub-component of the Epic/Product (* for all)
- Library/Module - The library or module that the Product/Component is depending on
- Stage - The kind of dependency
- Compile - The library is needed to compile the source code of the component into the target artifact (runtime)
- Test - The library is needed to test the target artifact
- Packaging - The library is needed to test the target artifact before, while and/or after packaging it
- Runtime - The library is shipped as a part of the target artifact (runtime)
- Provided - The library is not shipped as a part of the target artifact, but needed in it runtime
- All - The library is needed at all Stages
- Version - the version of the library that the component is dependant upon
- License - the license identifier
- Comment - any further remarks on the kind of dependency
| Product | Component | Library/Module | Version | Stage | License | Comment |
|---|---|---|---|---|---|---|
| * | * | Apache Maven | >=3.8 | Compile + Test + Packaging | Apache License 2.0 | |
| * | * | Docker Engine | >=20.10.17 | Packaging + Provided | Apache License 2.0 | |
| * | * | kubernetes/helm | >=1.20/3.9 | Provided | Apache License 2.0 | |
| * | * | Python | >=3.9 | Test + Packaging + Provided | Zero Clause BSD | |
| Dataspace | * | Java Runtime Environment (JRE) | >=17 | Test + Provided | * | License (GPL, BCL, ...) depends on choosen runtime. |
| Dataspace | * | Java Development Kit (JDK) | >=17 | Compile + Packaging | * | License (GPL, BCL, ...) depends on choosen kit. |
| Dataspace | * | Junit Jupiter | >=5 | Test | MIT | |
| Dataspace | * | Tractus-X EDC Extensions | >=1.9.5 | All | Apache License 2.0 | |
| Dataspace | * | Tractus-X Agent Implementations | >=1.9.5 | All | Apache License 2.0 | |
| Dataspace | Mock>Prognosis | Fastapi | >=0.70.0 | All | MIT | |
| Dataspace | Mock>Prognosis | Gunicorn | >=20.1.0 | All | MIT | |
| Dataspace | Mock>Prognosis | Python Dateutil | >=2.8.1 | All | Apache License 2.0 and BSD-3 | |
| Dataspace | Mock>Prognosis | Python Multipart | >=0.0.5 | All | Apache License 2.0 | |
| Dataspace | Mock>Prognosis | Uvicorn | >=0.15.0 | All | BSD-3 | |
| Dataspace | Mock>Prognosis | ISort | >=5.10.1 | All | MIT | |
| Dataspace | Mock>Prognosis | Pylint | >=2.14.3 | Compile | GPL-2 | |
| Dataspace | Mock>Prognosis | Pytest | >=6.2.5 | Test | MIT | |
| Dataspace | Mock>Prognosis | Pytest-Cov | >=3.0.0 | Test | MIT | |
| Dataspace | Mock>Prognosis | Requests | >=2.28.1 | All | Apache License 2.0 | |
| Dataspace | Virtualize>Dremio | Dremio OSS | >=22.1.1 | Runtime | Apache License 2.0 | |
| Dataspace | Virtualize>Druid | Apache Druid | >=24 | Runtime | Apache License 2.0 |