# List of Third Party Components in MongoDB source code # # This file is consumed by buildscripts/blackduck_hub.py # Sample # Note: the word TO_DO is supposed to be spelled as "TODO". It is spelled awkwardly in the example # to avoid the TODO scanner from filing an issue on the sample code. # # component_name: Sample Example Compnent # homepage_url: https://www.example.com # local_directory_path: src/third_party/example # open_hub_url: https://www.openhub.net/p/example # release_monitoring_id: 1234 # is_test_only: false # upgrade_suppression: TO_DO SERVER-12345 # vulnerability_suppression: TO_DO SERVER-12345 # team_owner: example # Description # component_name - string - required - Name of component in Black Duck Hub # homepage_url - URL - required - website where to find third party component # open_hub_url - URL - required - Black Duck Open Hub URL where to find third party component # not always available, see https://www.openhub.net # if not available, use text "N/A" # release_monitoring_id - integer - required - id of Fedora's Anitya project for monitoring releases # not always available, see https://release-monitoring.org/ # if not available, use integer "-1" # local_directory_path - path - required - relative path to directory containing code # is_test_only - bool - optional - false by default, true if the component is only part of test code and not shipped to users # test only components are not checked for upgrade or vulnerability issues # upgrade_suppression - string - optional - SERVER- or TW- ticket in JIRA, if present upgrade issues are ignored # Must be prefixed with TODO # vulnerability_suppression - string - optional - SERVER- or WT- ticket in JIRA, if present vulnerability issues are ignored # Must be prefixed with TODO # team_owner - string - required - server team that is responsible for maintaining library # TODO - can we query JIRA to see if the tickets are closed, check DAG code components: Abseil: homepage_url: https://abseil.io open_hub_url: https://openhub.net/p/abseil release_monitoring_id: 115295 local_directory_path: src/third_party/abseil-cpp team_owner: "Service Arch" upgrade_suppression: TODO SERVER-58675 "Asio C++ Library": homepage_url: http://think-async.com/Asio/ open_hub_url: N/A release_monitoring_id: 117 local_directory_path: src/third_party/asio-master team_owner: "Service Arch" upgrade_suppression: TODO SERVER-54659 benchmark: homepage_url: https://github.com/google/benchmark open_hub_url: https://www.openhub.net/p/benchmark release_monitoring_id: 18299 local_directory_path: src/third_party/benchmark is_test_only: true team_owner: "Service Arch" "Boost C++ Libraries - boost": homepage_url: https://www.boost.org/ open_hub_url: https://www.openhub.net/p/boost release_monitoring_id: 6845 local_directory_path: src/third_party/boost team_owner: "Service Arch" upgrade_suppression: TODO SERVER-70000 concurrencytest: homepage_url: https://github.com/cgoldberg/concurrencytest open_hub_url: https://www.openhub.net/p/concurrencytest release_monitoring_id: -1 local_directory_path: src/third_party/wiredtiger/test/3rdparty/concurrencytest-0.1.2-locally-modified is_test_only: true team_owner: "Storage Engines" c-ares: homepage_url: https://c-ares.org/ open_hub_url: https://www.openhub.net/p/c-ares release_monitoring_id: 5840 local_directory_path: src/third_party/cares team_owner: "Service Arch" upgrade_suppression: TODO SERVER-74870 RoaringBitmap/CRoaring: homepage_url: https://roaringbitmap.org/ open_hub_url: N/A release_monitoring_id: 370651 local_directory_path: src/third_party/croaring team_owner: "Query Execution" "Cyrus SASL": homepage_url: https://www.cyrusimap.org/sasl/ open_hub_url: https://openhub.net/p/cyrus-sasl release_monitoring_id: 13280 # Empty since the library is linked and not in the source tree local_directory_path: team_owner: "Server Security" "dcleblanc/SafeInt": homepage_url: https://github.com/dcleblanc/SafeInt open_hub_url: https://www.openhub.net/p/SafeInt release_monitoring_id: -1 local_directory_path: src/third_party/SafeInt team_owner: "Service Arch" upgrade_suppression: TODO SERVER-79444 derickr/timelib: homepage_url: https://github.com/derickr/timelib open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/timelib team_owner: "Query Execution" discover: homepage_url: https://pypi.org/project/discover/ open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/wiredtiger/test/3rdparty/discover-0.4.0-locally-modified is_test_only: true team_owner: "Storage Engines" fmtlib/fmt: homepage_url: https://fmt.dev open_hub_url: https://www.openhub.net/p/fmtlib_fmt release_monitoring_id: 11526 local_directory_path: src/third_party/fmt team_owner: "Server Security" upgrade_suppression: TODO SERVER-57876 google/s2geometry: homepage_url: https://github.com/google/s2geometry open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/s2 team_owner: "Query Integration" # Note: Code in MongoDB is based on early release here - https://code.google.com/archive/p/s2-geometry-library/ google-snappy: homepage_url: https://google.github.io/snappy/ open_hub_url: N/A release_monitoring_id: 4844 local_directory_path: src/third_party/snappy team_owner: "Service Arch" upgrade_suppression: TODO SERVER-89716 gperftools: homepage_url: https://github.com/gperftools/gperftools open_hub_url: https://www.openhub.net/p/google-perftools release_monitoring_id: 1238 local_directory_path: src/third_party/gperftools team_owner: "Service Arch" # TODO - fix the version number in Black Duck upgrade_suppression: TODO SERVER-67432 grpc: homepage_url: https://grpc.io/ open_hub_url: https://www.openhub.net/p/grpc release_monitoring_id: 19117 local_directory_path: src/third_party/grpc team_owner: "Service Arch" upgrade_suppression: TODO SERVER-94652 "ICU for C/C++ (ICU4C)": homepage_url: http://site.icu-project.org/ open_hub_url: https://www.openhub.net/p/icu4c release_monitoring_id: 16134 local_directory_path: src/third_party/icu4c-57.1 team_owner: "Query Execution" vulnerability_suppression: TODO SERVER-49211 upgrade_suppression: TODO SERVER-49211 arximboldi/immer: homepage_url: https://github.com/arximboldi/immer open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/immer team_owner: "Storage Execution" "Intel Decimal Floating-Point Math Library": homepage_url: https://software.intel.com/content/www/us/en/develop/articles/intel-decimal-floating-point-math-library.html open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/IntelRDFPMathLib20U1 team_owner: "Storage Execution" # Note: IntelRDFPMathLib exists in Black Duck, but not OpenHub jbeder/yaml-cpp: homepage_url: https://github.com/jbeder/yaml-cpp open_hub_url: https://www.openhub.net/p/jbeder_yaml-cpp release_monitoring_id: 5284 local_directory_path: src/third_party/yaml-cpp team_owner: "Server Security" upgrade_suppression: TODO SERVER-60439 JSON-Schema-Test-Suite: homepage_url: https://github.com/json-schema-org/JSON-Schema-Test-Suite open_hub_url: https://www.openhub.net/p/json-schema-test-suite release_monitoring_id: -1 local_directory_path: src/third_party/JSON-Schema-Test-Suite is_test_only: true team_owner: "Query Optimization" # Note: This is a test-only library and not compiled into the server. libbsoncxx: homepage_url: https://github.com/mongodb/mongo-cxx-driver open_hub_url: https://www.openhub.net/p/mongo-cxx-driver release_monitoring_id: 6167 local_directory_path: enterprise/src/streams/third_party/mongocxx/dist/bsoncxx team_owner: "Atlas Streams" upgrade_suppression: TODO SERVER-90035 # Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing. libmongocrypt: homepage_url: https://github.com/mongodb/libmongocrypt open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/libmongocrypt team_owner: "Server Security" # Note: libmongocrypt exists in Black Duck, but not OpenHub "librdkafka - the Apache Kafka C/C++ client library": homepage_url: https://github.com/confluentinc/librdkafka/ open_hub_url: https://openhub.net/p/librdkafka release_monitoring_id: 12573 local_directory_path: src/third_party/librdkafka team_owner: "Atlas Streams" upgrade_suppression: TODO SERVER-79507 # Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing. linenoise: homepage_url: https://github.com/antirez/linenoise open_hub_url: https://www.openhub.net/p/linenoise release_monitoring_id: 5691 local_directory_path: [src/mongo/shell/linenoise.h, src/mongo/shell/linenoise.cpp] team_owner: "Server Tooling & Methods" upgrade_suppression: TODO SERVER-514767 LibTomCrypt: homepage_url: https://www.libtom.net/ open_hub_url: https://www.openhub.net/p/libtomcrypt release_monitoring_id: 15563 local_directory_path: src/third_party/tomcrypt-1.18.2 team_owner: "Server Security" libunwind/libunwind: homepage_url: http://www.nongnu.org/libunwind/ open_hub_url: https://www.openhub.net/p/p_w_d10376 release_monitoring_id: 1748 local_directory_path: src/third_party/unwind team_owner: "Service Arch" upgrade_suppression: TODO SERVER-75786 "MongoDB C Driver": homepage_url: https://github.com/mongodb/mongo-c-driver open_hub_url: https://www.openhub.net/p/mongo-c-driver release_monitoring_id: 10712 local_directory_path: src/third_party/libbson team_owner: "Server Security" # Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing. mongo-cxx-driver: homepage_url: https://github.com/mongodb/mongo-cxx-driver open_hub_url: https://www.openhub.net/p/mongo-cxx-driver release_monitoring_id: 6167 local_directory_path: enterprise/src/streams/third_party/mongocxx team_owner: "Atlas Streams" upgrade_suppression: TODO SERVER-90035 # Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing. "Mozilla Firefox": homepage_url: https://www.mozilla.org/en-US/firefox/organizations/ open_hub_url: https://www.openhub.net/p/firefox release_monitoring_id: 16838 local_directory_path: src/third_party/mozjs team_owner: "Query Integration" upgrade_suppression: TODO SERVER-90310 nlohmann.json.decomposed: homepage_url: https://github.com/nlohmann/json open_hub_url: https://www.openhub.net/p/nlohmann_json release_monitoring_id: 11152 local_directory_path: src/third_party/wiredtiger/test/3rdparty/nlohmann is_test_only: true team_owner: "Storage Engines" node: homepage_url: https://github.com/nodejs/node open_hub_url: https://openhub.net/p/node release_monitoring_id: 8251 local_directory_path: src/third_party/node is_test_only: true team_owner: "Workload Scheduling" ocspbuilder: homepage_url: https://github.com/wbond/ocspbuilder open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/mock_ocsp_responder is_test_only: true team_owner: "Server Security" # Note: ocspbuilder exists in Black Duck, but not OpenHub ocspresponder: homepage_url: https://github.com/threema-ch/ocspresponder open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/mock_ocsp_responder is_test_only: true team_owner: "Server Security" # Note: ocspresponder exists in Black Duck, but not OpenHub PCRE2: homepage_url: https://www.pcre.org/ open_hub_url: https://www.openhub.net/p/pcre2 release_monitoring_id: 5832 local_directory_path: src/third_party/pcre2 team_owner: "Query Execution" upgrade_suppression: TODO SERVER-79445 Protobuf: homepage_url: https://developers.google.com/protocol-buffers/ open_hub_url: https://www.openhub.net/p/protobuf release_monitoring_id: 3715 local_directory_path: src/third_party/protobuf team_owner: "Service Arch" upgrade_suppression: TODO SERVER-94652 pyiso8601: homepage_url: https://github.com/micktwomey/pyiso8601 open_hub_url: https://openhub.net/p/pyiso8601 release_monitoring_id: 17228 local_directory_path: src/third_party/wiredtiger/test/3rdparty/iso8601-2.1.0 is_test_only: true team_owner: "Storage Engines" testscenarios: homepage_url: https://launchpad.net/testscenarios open_hub_url: https://www.openhub.net/p/testscenarios release_monitoring_id: 13220 local_directory_path: src/third_party/wiredtiger/test/3rdparty/testscenarios-0.4 is_test_only: true team_owner: "Storage Engines" google-re2: homepage_url: https://github.com/google/re2 open_hub_url: https://www.openhub.net/p/google-re2 release_monitoring_id: 10500 local_directory_path: src/third_party/re2 team_owner: "Service Arch" upgrade_suppression: TODO SERVER-94652 testing-cabal/extras: homepage_url: https://github.com/testing-cabal/extras open_hub_url: https://www.openhub.net/p/550227 release_monitoring_id: 13192 local_directory_path: src/third_party/wiredtiger/test/3rdparty/extras-0.0.3 is_test_only: true team_owner: "Storage Engines" SchemaStore/schemastore: homepage_url: https://www.schemastore.org/ open_hub_url: N/A release_monitoring_id: -1 local_directory_path: src/third_party/schemastore.org is_test_only: true team_owner: "Query Optimization" # Note: This is a test-only library and not compiled into the server. "SCons - a Software Construction tool": homepage_url: https://www.scons.org/ open_hub_url: https://www.openhub.net/p/scons release_monitoring_id: 4770 local_directory_path: src/third_party/scons-3.1.2 team_owner: "Build" upgrade_suppression: TODO SERVER-49324 smhasher: homepage_url: https://github.com/aappleby/smhasher open_hub_url: https://www.openhub.net/p/smhasher release_monitoring_id: -1 local_directory_path: src/third_party/murmurhash3 team_owner: "Storage Execution" "Snowball Stemming Algorithms": homepage_url: https://snowballstem.org/ open_hub_url: https://www.openhub.net/p/Snowball_Stemming_Algorithms release_monitoring_id: 7853 local_directory_path: src/third_party/libstemmer_c team_owner: "Query Integration" upgrade_suppression: TODO SERVER-51478 subunit: homepage_url: https://launchpad.net/subunit open_hub_url: N/A release_monitoring_id: 85461 local_directory_path: src/third_party/wiredtiger/test/3rdparty/python-subunit-1.4.4 is_test_only: true team_owner: "Storage Engines" unicode: homepage_url: http://www.unicode.org open_hub_url: N/A release_monitoring_id: 5045 local_directory_path: src/third_party/unicode-8.0.0 team_owner: "Query Execution" valgrind: homepage_url: https://valgrind.org/ open_hub_url: https://www.openhub.net/p/valgrind release_monitoring_id: 13639 local_directory_path: src/third_party/valgrind team_owner: "Build" upgrade_suppression: TODO SERVER-71860 testtools: homepage_url: https://launchpad.net/testtools open_hub_url: https://www.openhub.net/p/python-testtools release_monitoring_id: 4047 local_directory_path: src/third_party/wiredtiger/test/3rdparty/testtools-2.7.1 is_test_only: true team_owner: "Storage Engines" tcmalloc: homepage_url: https://github.com/google/tcmalloc open_hub_url: https://openhub.net/p/tcmalloc release_monitoring_id: -1 # (371589) but there are no version numbers local_directory_path: src/third_party/tcmalloc team_owner: "Service Arch" zlib: homepage_url: https://www.zlib.net/ open_hub_url: https://www.openhub.net/p/zlib release_monitoring_id: 5303 local_directory_path: src/third_party/zlib team_owner: "Service Arch" upgrade_suppression: TODO SERVER-90307 zstd: homepage_url: http://www.zstd.net/ open_hub_url: https://www.openhub.net/p/zstd release_monitoring_id: 12083 local_directory_path: src/third_party/zstandard team_owner: "Service Arch" upgrade_suppression: TODO SERVER-88708