2019-03-15 20:51:40 +01:00
|
|
|
|
# MongoDB Third Party Dependencies
|
|
|
|
|
|
|
|
|
|
|
|
MongoDB depends on third party libraries to implement some
|
|
|
|
|
|
functionality. This document describes which libraries are depended
|
|
|
|
|
|
upon, and how. It is maintained by and for humans, and so while it is a
|
|
|
|
|
|
best effort attempt to describe the server’s dependencies, it is subject
|
|
|
|
|
|
to change as libraries are added or removed.
|
|
|
|
|
|
|
|
|
|
|
|
## Server Vendored Libraries
|
|
|
|
|
|
|
|
|
|
|
|
This is the list of third party libraries vendored into the server
|
|
|
|
|
|
codebase, and the upstream source where updates may be obtained. These
|
|
|
|
|
|
sources are periodically consulted, and the existence of new versions is
|
|
|
|
|
|
reflected in this list. A ticket is filed in Jira if a determination is
|
|
|
|
|
|
made to upgrade a vendored library.
|
|
|
|
|
|
|
|
|
|
|
|
Whenever a vendored library is included in released binary artifacts, is
|
|
|
|
|
|
not authored by MongoDB, and has a license which requires reproduction,
|
|
|
|
|
|
a notice will be included in
|
|
|
|
|
|
`THIRD-PARTY-NOTICES`.
|
|
|
|
|
|
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| Name | License | Upstream Version | Vendored Version | Emits persisted data | Distributed in Release Binaries |
|
|
|
|
|
|
| ---------------------------| ----------------- | ---------------- | ------------------| :------------------: | :-----------------------------: |
|
|
|
|
|
|
| [abseil-cpp] | Apache-2.0 | | 070f6e47b3 | | ✗ |
|
|
|
|
|
|
| Aladdin MD5 | Zlib | | Unknown | ✗ | ✗ |
|
2019-10-21 19:49:44 +02:00
|
|
|
|
| [ASIO] | BSL-1.0 | 1.14.0 | b0926b61b0 | | ✗ |
|
2019-06-06 21:28:40 +02:00
|
|
|
|
| [benchmark] | Apache-2.0 | 1.5.0 | 1.4.1 | | |
|
2020-01-10 16:30:41 +01:00
|
|
|
|
| [Boost] | BSL-1.0 | 1.72.0 | 1.70.0 | | ✗ |
|
|
|
|
|
|
| [fmt] | BSD-2-Clause | 6.1.2 | 6.1.1 | | ✗ |
|
2019-04-25 20:53:09 +02:00
|
|
|
|
| [GPerfTools] | BSD-3-Clause | 2.7 | 2.7 | | ✗ |
|
|
|
|
|
|
| [ICU4] | ICU | 64.2 | 57.1 | ✗ | ✗ |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [Intel Decimal FP Library] | BSD-3-Clause | 2.0 Update 2 | 2.0 Update 1 | | ✗ |
|
|
|
|
|
|
| [JSON-Schema-Test-Suite] | MIT | | 728066f9c5 | | |
|
2019-04-25 20:53:09 +02:00
|
|
|
|
| [kms-message] | | | 75e391a037 | | ✗ |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [libstemmer] | BSD-3-Clause | | Unknown | ✗ | ✗ |
|
|
|
|
|
|
| [linenoise] | BSD-3-Clause | | Unknown + changes | | ✗ |
|
2019-10-21 19:49:44 +02:00
|
|
|
|
| [MozJS] | MPL-2.0 | ESR 60.9 | ESR 60.3.0 | | ✗ |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [MurmurHash3] | Public Domain | | Unknown + changes | ✗ | ✗ |
|
2019-11-15 01:18:36 +01:00
|
|
|
|
| [ocspbuilder] | MIT | 0.10.2 | 0.10.2 | | |
|
|
|
|
|
|
| [ocspresponder] | Apache-2.0 | 0.5.0 | 0.5.0 | | |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [Pcre] | BSD-3-Clause | 8.43 | 8.42 | | ✗ |
|
|
|
|
|
|
| [S2] | Apache-2.0 | | Unknown | ✗ | ✗ |
|
2020-01-10 16:30:41 +01:00
|
|
|
|
| [SafeInt] | MIT | 3.22 | 3.0.20p | | |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [scons] | MIT | 3.0.4 | 3.0.4 | | |
|
|
|
|
|
|
| [Snappy] | BSD-3-Clause | 1.1.7 | 1.1.7 | ✗ | ✗ |
|
|
|
|
|
|
| [timelib] | MIT | 2018.01 | 2018.01 | | ✗ |
|
|
|
|
|
|
| [TomCrypt] | Public Domain | 1.18.2 | 1.18.2 | ✗ | ✗ |
|
2019-07-26 00:52:49 +02:00
|
|
|
|
| [Unicode] | Unicode-DFS-2015 | 12.1.0 | 8.0.0 | ✗ | ✗ |
|
|
|
|
|
|
| [Valgrind] | BSD-3-Clause<sup>\[<a href="#note_vg" id="ref_vg">1</a>]</sup> | 3.15.0 | 3.11.0 | | ✗ |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [variant] | BSL-1.0 | 1.4.0 | 1.3.0 | | ✗ |
|
|
|
|
|
|
| [wiredtiger] | | | <sup>\[<a href="#note_wt" id="ref_wt">2</a>]</sup> | ✗ | ✗ |
|
2019-10-21 19:49:44 +02:00
|
|
|
|
| [yaml-cpp] | MIT | 0.6.3 | 0.6.2 | | ✗ |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| [Zlib] | Zlib | 1.2.11 | 1.2.11 | ✗ | ✗ |
|
2020-01-10 16:30:41 +01:00
|
|
|
|
| [Zstandard] | BSD-3-Clause | 1.4.4 | 1.4.3 | ✗ | ✗ |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
|
|
|
|
|
|
[abseil-cpp]: https://github.com/abseil/abseil-cpp
|
|
|
|
|
|
[ASIO]: https://github.com/chriskohlhoff/asio
|
|
|
|
|
|
[benchmark]: https://github.com/google/benchmark
|
|
|
|
|
|
[Boost]: http://www.boost.org/
|
2019-04-08 17:28:13 +02:00
|
|
|
|
[fmt]: http://fmtlib.net/
|
2019-04-01 19:07:09 +02:00
|
|
|
|
[GPerfTools]: https://github.com/gperftools/gperftools
|
|
|
|
|
|
[ICU4]: http://site.icu-project.org/download/
|
|
|
|
|
|
[Intel Decimal FP Library]: https://software.intel.com/en-us/articles/intel-decimal-floating-point-math-library
|
|
|
|
|
|
[JSON-Schema-Test-Suite]: https://github.com/json-schema-org/JSON-Schema-Test-Suite
|
|
|
|
|
|
[kms-message]: https://github.com/mongodb-labs/kms-message
|
|
|
|
|
|
[libstemmer]: https://github.com/snowballstem/snowball
|
|
|
|
|
|
[linenoise]: https://github.com/antirez/linenoise
|
|
|
|
|
|
[MozJS]: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr
|
|
|
|
|
|
[MurmurHash3]: https://github.com/aappleby/smhasher/blob/master/src/MurmurHash3.cpp
|
2019-11-15 01:18:36 +01:00
|
|
|
|
[ocspbuilder]: https://github.com/wbond/ocspbuilder
|
|
|
|
|
|
[ocspresponder]: https://github.com/threema-ch/ocspresponder
|
2019-04-01 19:07:09 +02:00
|
|
|
|
[Pcre]: http://www.pcre.org/
|
|
|
|
|
|
[S2]: https://github.com/google/s2geometry
|
2019-05-22 05:26:25 +02:00
|
|
|
|
[SafeInt]: https://github.com/dcleblanc/SafeInt
|
2019-04-01 19:07:09 +02:00
|
|
|
|
[scons]: https://github.com/SCons/scons
|
|
|
|
|
|
[Snappy]: https://github.com/google/snappy/releases
|
|
|
|
|
|
[timelib]: https://github.com/derickr/timelib
|
|
|
|
|
|
[TomCrypt]: https://github.com/libtom/libtomcrypt/releases
|
|
|
|
|
|
[Unicode]: http://www.unicode.org/versions/enumeratedversions.html
|
|
|
|
|
|
[Valgrind]: http://valgrind.org/downloads/current.html
|
|
|
|
|
|
[variant]: https://github.com/mpark/variant
|
|
|
|
|
|
[wiredtiger]: https://github.com/wiredtiger/wiredtiger
|
|
|
|
|
|
[yaml-cpp]: https://github.com/jbeder/yaml-cpp/releases
|
|
|
|
|
|
[Zlib]: https://zlib.net/
|
|
|
|
|
|
[Zstandard]: https://github.com/facebook/zstd
|
2019-03-15 20:51:40 +01:00
|
|
|
|
|
|
|
|
|
|
## WiredTiger Vendored Test Libraries
|
|
|
|
|
|
|
|
|
|
|
|
The following Python libraries are transitively included by WiredTiger,
|
|
|
|
|
|
and are used by that component for testing. They don’t appear in
|
|
|
|
|
|
released binary artifacts.
|
|
|
|
|
|
|
|
|
|
|
|
| Name |
|
|
|
|
|
|
| :-------------- |
|
|
|
|
|
|
| concurrencytest |
|
|
|
|
|
|
| discover |
|
|
|
|
|
|
| extras |
|
|
|
|
|
|
| python-subunit |
|
|
|
|
|
|
| testscenarios |
|
|
|
|
|
|
| testtools |
|
|
|
|
|
|
|
|
|
|
|
|
## Dynamically Linked Libraries
|
|
|
|
|
|
|
|
|
|
|
|
Sometimes MongoDB needs to load libraries provided and managed by the
|
|
|
|
|
|
runtime environment. These libraries are not vendored into the MongoDB
|
|
|
|
|
|
source directory, and are not compiled into release artifacts. Because
|
|
|
|
|
|
they are provided by the runtime environment, the precise versions of
|
|
|
|
|
|
these libraries cannot be known in advance. Further, these libraries may
|
|
|
|
|
|
themselves load other libraries. The full set of transitively linked
|
|
|
|
|
|
libraries will depend on the runtime environment, and cannot be outlined
|
|
|
|
|
|
here. On Windows and Mac OS, other libraries and components provided by
|
|
|
|
|
|
the Operating System may be loaded.
|
|
|
|
|
|
|
|
|
|
|
|
For Windows Enterprise, we may ship precompiled DLLs containing some of
|
|
|
|
|
|
these libraries. Releases prepared in this fashion will include a copy
|
|
|
|
|
|
of these libraries’ license in a file named
|
|
|
|
|
|
`THIRD-PARTY-NOTICES.windows`.
|
|
|
|
|
|
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| Name | Enterprise Only | Has Windows DLLs |
|
2019-03-15 20:51:40 +01:00
|
|
|
|
| :--------- | :-------------: | :--------------: |
|
2019-04-01 19:07:09 +02:00
|
|
|
|
| Cyrus SASL | Yes | Yes |
|
|
|
|
|
|
| libldap | Yes | No |
|
|
|
|
|
|
| net-snmp | Yes | Yes |
|
|
|
|
|
|
| OpenSSL | No | Yes<sup>\[<a href="#note_ssl" id="ref_ssl">3</a>]</sup> |
|
|
|
|
|
|
| libcurl | No | No |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## Notes:
|
|
|
|
|
|
|
|
|
|
|
|
1. <a id="note_vg" href="#ref_vg">^</a>
|
|
|
|
|
|
The majority of Valgrind is licensed under the GPL, with the exception of a single
|
|
|
|
|
|
header file which is licensed under a BSD license. This BSD licensed header is the only
|
|
|
|
|
|
file from Valgrind which is vendored and consumed by MongoDB.
|
|
|
|
|
|
|
|
|
|
|
|
2. <a id="note_wt" href="#ref_wt">^</a>
|
|
|
|
|
|
WiredTiger is maintained by MongoDB in a separate repository. As a part of our
|
|
|
|
|
|
development process, we periodically ingest the latest snapshot of that repository.
|
|
|
|
|
|
|
|
|
|
|
|
3. <a id="note_ssl" href="#ref_ssl">^</a>
|
|
|
|
|
|
OpenSSL is only shipped as a dependency of the MongoDB tools written in Go. The MongoDB
|
|
|
|
|
|
shell and server binaries use Windows’ cryptography APIs.
|
