Check and obey licenses of all dependencies

[kutis96]

It would be nice not to violate the license terms of all dependencies.

I currently don't even know if I'm doing that or not.

It may be nice to check.

spacedoc-config:

• commons-beanutils/commons-beanutils:1.9.4
  • Apache License 2.0
• org.apache.commons/commons-lang3:3.11
  • Apache License 2.0
• org.json/json:20210307
  • JSON.org
• org.projectlombok/lombok:1.18.20
  • Not a runtime dependency
  • Lombok license
• org.graalvm.sdk/graal-sdk:21.1.0
  • Not a runtime dependency
  • Universal Permissive License (UPL), Version 1.0

spacedoc-markdown:

• org.commonmark/commonmark:0.17.2
  • BSD 2-Clause "Simplified" License
• org.commonmark/commonmark-ext-gfm-tables:0.17.2
  • BSD 2-Clause "Simplified" License
• org.commonmark/commonmark-ext-ins:0.17.2
  • BSD 2-Clause "Simplified" License
• org.commonmark/commonmark-ext-gfm-strikethrough:0.17.2
  • BSD 2-Clause "Simplified" License
• org.json/json:20210307
  • JSON.org

spacedoc-ffc:

• org.graalvm.sdk/graal-sdk:21.1.0
  • Not a runtime dependency
  • Universal Permissive License (UPL), Version 1.0
• org.graalvm.truffle/truffle-api:21.1.0
  • Not a runtime dependency
  • Universal Permissive License (UPL), Version 1.0

spacedoc-executable:

• commons-cli/commons-cli:1.4
  • Apache License 2.0

---

Quick (TL;DR) requirement LUT:

BSD 2-Clause "Simplified" License

• Full text here
• Retain the license, copyright notice and disclaimer in source and binary

JSON.org

• Full text here
• Retain the license, copyright notice and disclaimer in source and binary
• "The Software shall be used for Good, not Evil."

Universal Permissive License (UPL), Version 1.0

• Full text here
• Retain the license, copyright notice and disclaimer in source and binary

Apache License

• Full text here
• Retain the license, copyright notice and disclaimer in source and binary
• Change notice
• Retain all copyright, patent, trademark, and attribution notices from the source
• Must include a NOTICE file if the source does

Lombok License

• Full text here
• Retain the license, copyright notice and disclaimer in source and binary

---

Since the source for these dependencies is available online, it may be nice to generate attribution/NOTICE files based on the stuff in the actual source of the dependencies.

• Create a GitHub Action for re-generating NOTICE/license files (someday)