1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
|
# List of Third Party Components in MongoDB source code
#
# This file is consumed by buildscripts/blackduck_hub.py
# Sample
# Note: the word TO_DO is supposed to be spelled as "TODO". It is spelled awkwardly in the example
# to avoid the TODO scanner from filing an issue on the sample code.
#
# component_name: Sample Example Compnent
# homepage_url: https://www.example.com
# local_directory_path: src/third_party/example
# open_hub_url: https://www.openhub.net/p/example
# release_monitoring_id: 1234
# is_test_only: false
# upgrade_suppression: TO_DO SERVER-12345
# vulnerability_suppression: TO_DO SERVER-12345
# team_owner: example
# Description
# component_name - string - required - Name of component in Black Duck Hub
# homepage_url - URL - required - website where to find third party component
# open_hub_url - URL - required - Black Duck Open Hub URL where to find third party component
# not always available, see https://www.openhub.net
# if not available, use text "N/A"
# release_monitoring_id - integer - required - id of Fedora's Anitya project for monitoring releases
# not always available, see https://release-monitoring.org/
# if not available, use integer "-1"
# local_directory_path - path - required - relative path to directory containing code
# is_test_only - bool - optional - false by default, true if the component is only part of test code and not shipped to users
# test only components are not checked for upgrade or vulnerability issues
# upgrade_suppression - string - optional - SERVER- or TW- ticket in JIRA, if present upgrade issues are ignored
# Must be prefixed with TODO
# vulnerability_suppression - string - optional - SERVER- or WT- ticket in JIRA, if present vulnerability issues are ignored
# Must be prefixed with TODO
# team_owner - string - required - server team that is responsible for maintaining library
# TODO - can we query JIRA to see if the tickets are closed, check DAG code
components:
Abseil:
homepage_url: https://abseil.io
open_hub_url: https://openhub.net/p/abseil
release_monitoring_id: 115295
local_directory_path: src/third_party/abseil-cpp
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-58675
"Asio C++ Library":
homepage_url: http://think-async.com/Asio/
open_hub_url: N/A
release_monitoring_id: 117
local_directory_path: src/third_party/asio-master
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-54659
benchmark:
homepage_url: https://github.com/google/benchmark
open_hub_url: https://www.openhub.net/p/benchmark
release_monitoring_id: 18299
local_directory_path: src/third_party/benchmark
is_test_only: true
team_owner: "Service Arch"
"Boost C++ Libraries - boost":
homepage_url: https://www.boost.org/
open_hub_url: https://www.openhub.net/p/boost
release_monitoring_id: 6845
local_directory_path: src/third_party/boost
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-70000
concurrencytest:
homepage_url: https://github.com/cgoldberg/concurrencytest
open_hub_url: https://www.openhub.net/p/concurrencytest
release_monitoring_id: -1
local_directory_path: src/third_party/wiredtiger/test/3rdparty/concurrencytest-0.1.2-locally-modified
is_test_only: true
team_owner: "Storage Engines"
c-ares:
homepage_url: https://c-ares.org/
open_hub_url: https://www.openhub.net/p/c-ares
release_monitoring_id: 5840
local_directory_path: src/third_party/cares
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-74870
RoaringBitmap/CRoaring:
homepage_url: https://roaringbitmap.org/
open_hub_url: N/A
release_monitoring_id: 370651
local_directory_path: src/third_party/croaring
team_owner: "Query Execution"
"Cyrus SASL":
homepage_url: https://www.cyrusimap.org/sasl/
open_hub_url: https://openhub.net/p/cyrus-sasl
release_monitoring_id: 13280
# Empty since the library is linked and not in the source tree
local_directory_path:
team_owner: "Server Security"
"dcleblanc/SafeInt":
homepage_url: https://github.com/dcleblanc/SafeInt
open_hub_url: https://www.openhub.net/p/SafeInt
release_monitoring_id: -1
local_directory_path: src/third_party/SafeInt
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-79444
derickr/timelib:
homepage_url: https://github.com/derickr/timelib
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/timelib
team_owner: "Query Execution"
discover:
homepage_url: https://pypi.org/project/discover/
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/wiredtiger/test/3rdparty/discover-0.4.0-locally-modified
is_test_only: true
team_owner: "Storage Engines"
fmtlib/fmt:
homepage_url: https://fmt.dev
open_hub_url: https://www.openhub.net/p/fmtlib_fmt
release_monitoring_id: 11526
local_directory_path: src/third_party/fmt
team_owner: "Server Security"
upgrade_suppression: TODO SERVER-57876
google/s2geometry:
homepage_url: https://github.com/google/s2geometry
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/s2
team_owner: "Query Integration"
# Note: Code in MongoDB is based on early release here - https://code.google.com/archive/p/s2-geometry-library/
google-snappy:
homepage_url: https://google.github.io/snappy/
open_hub_url: N/A
release_monitoring_id: 4844
local_directory_path: src/third_party/snappy
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-89716
gperftools:
homepage_url: https://github.com/gperftools/gperftools
open_hub_url: https://www.openhub.net/p/google-perftools
release_monitoring_id: 1238
local_directory_path: src/third_party/gperftools
team_owner: "Service Arch"
# TODO - fix the version number in Black Duck
upgrade_suppression: TODO SERVER-67432
grpc:
homepage_url: https://grpc.io/
open_hub_url: https://www.openhub.net/p/grpc
release_monitoring_id: 19117
local_directory_path: src/third_party/grpc
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-75761
"ICU for C/C++ (ICU4C)":
homepage_url: http://site.icu-project.org/
open_hub_url: https://www.openhub.net/p/icu4c
release_monitoring_id: 16134
local_directory_path: src/third_party/icu4c-57.1
team_owner: "Query Execution"
vulnerability_suppression: TODO SERVER-49211
upgrade_suppression: TODO SERVER-49211
arximboldi/immer:
homepage_url: https://github.com/arximboldi/immer
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/immer
team_owner: "Storage Execution"
"Intel Decimal Floating-Point Math Library":
homepage_url: https://software.intel.com/content/www/us/en/develop/articles/intel-decimal-floating-point-math-library.html
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/IntelRDFPMathLib20U1
team_owner: "Storage Execution"
# Note: IntelRDFPMathLib exists in Black Duck, but not OpenHub
jbeder/yaml-cpp:
homepage_url: https://github.com/jbeder/yaml-cpp
open_hub_url: https://www.openhub.net/p/jbeder_yaml-cpp
release_monitoring_id: 5284
local_directory_path: src/third_party/yaml-cpp
team_owner: "Server Security"
upgrade_suppression: TODO SERVER-60439
JSON-Schema-Test-Suite:
homepage_url: https://github.com/json-schema-org/JSON-Schema-Test-Suite
open_hub_url: https://www.openhub.net/p/json-schema-test-suite
release_monitoring_id: -1
local_directory_path: src/third_party/JSON-Schema-Test-Suite
is_test_only: true
team_owner: "Query Optimization"
# Note: This is a test-only library and not compiled into the server.
libbsoncxx:
homepage_url: https://github.com/mongodb/mongo-cxx-driver
open_hub_url: https://www.openhub.net/p/mongo-cxx-driver
release_monitoring_id: 6167
local_directory_path: enterprise/src/streams/third_party/mongocxx/dist/bsoncxx
team_owner: "Atlas Streams"
upgrade_suppression: TODO SERVER-90035
# Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing.
libmongocrypt:
homepage_url: https://github.com/mongodb/libmongocrypt
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/libmongocrypt
team_owner: "Server Security"
# Note: libmongocrypt exists in Black Duck, but not OpenHub
"librdkafka - the Apache Kafka C/C++ client library":
homepage_url: https://github.com/confluentinc/librdkafka/
open_hub_url: https://openhub.net/p/librdkafka
release_monitoring_id: 12573
local_directory_path: src/third_party/librdkafka
team_owner: "Atlas Streams"
upgrade_suppression: TODO SERVER-79507
# Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing.
linenoise:
homepage_url: https://github.com/antirez/linenoise
open_hub_url: https://www.openhub.net/p/linenoise
release_monitoring_id: 5691
local_directory_path:
[src/mongo/shell/linenoise.h, src/mongo/shell/linenoise.cpp]
team_owner: "Server Tooling & Methods"
upgrade_suppression: TODO SERVER-514767
LibTomCrypt:
homepage_url: https://www.libtom.net/
open_hub_url: https://www.openhub.net/p/libtomcrypt
release_monitoring_id: 15563
local_directory_path: src/third_party/tomcrypt-1.18.2
team_owner: "Server Security"
libunwind/libunwind:
homepage_url: http://www.nongnu.org/libunwind/
open_hub_url: https://www.openhub.net/p/p_w_d10376
release_monitoring_id: 1748
local_directory_path: src/third_party/unwind
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-75786
"MongoDB C Driver":
homepage_url: https://github.com/mongodb/mongo-c-driver
open_hub_url: https://www.openhub.net/p/mongo-c-driver
release_monitoring_id: 10712
local_directory_path: src/third_party/libbson
team_owner: "Server Security"
# Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing.
mongo-cxx-driver:
homepage_url: https://github.com/mongodb/mongo-cxx-driver
open_hub_url: https://www.openhub.net/p/mongo-cxx-driver
release_monitoring_id: 6167
local_directory_path: enterprise/src/streams/third_party/mongocxx
team_owner: "Atlas Streams"
upgrade_suppression: TODO SERVER-90035
# Note: Not included in release builds of MongoDB, only used for Atlas Stream Processing.
"Mozilla Firefox":
homepage_url: https://www.mozilla.org/en-US/firefox/organizations/
open_hub_url: https://www.openhub.net/p/firefox
release_monitoring_id: 16838
local_directory_path: src/third_party/mozjs
team_owner: "Query Integration"
upgrade_suppression: TODO SERVER-90310
nlohmann.json.decomposed:
homepage_url: https://github.com/nlohmann/json
open_hub_url: https://www.openhub.net/p/nlohmann_json
release_monitoring_id: 11152
local_directory_path: src/third_party/wiredtiger/test/3rdparty/nlohmann
is_test_only: true
team_owner: "Storage Engines"
node:
homepage_url: https://github.com/nodejs/node
open_hub_url: https://openhub.net/p/node
release_monitoring_id: 8251
local_directory_path: src/third_party/node
is_test_only: true
team_owner: "Workload Scheduling"
ocspbuilder:
homepage_url: https://github.com/wbond/ocspbuilder
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/mock_ocsp_responder
is_test_only: true
team_owner: "Server Security"
# Note: ocspbuilder exists in Black Duck, but not OpenHub
ocspresponder:
homepage_url: https://github.com/threema-ch/ocspresponder
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/mock_ocsp_responder
is_test_only: true
team_owner: "Server Security"
# Note: ocspresponder exists in Black Duck, but not OpenHub
PCRE2:
homepage_url: https://www.pcre.org/
open_hub_url: https://www.openhub.net/p/pcre2
release_monitoring_id: 5832
local_directory_path: src/third_party/pcre2
team_owner: "Query Execution"
upgrade_suppression: TODO SERVER-79445
Protobuf:
homepage_url: https://developers.google.com/protocol-buffers/
open_hub_url: https://www.openhub.net/p/protobuf
release_monitoring_id: 3715
local_directory_path: src/third_party/protobuf
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-75761
pyiso8601:
homepage_url: https://github.com/micktwomey/pyiso8601
open_hub_url: https://openhub.net/p/pyiso8601
release_monitoring_id: 17228
local_directory_path: src/third_party/wiredtiger/test/3rdparty/iso8601-2.1.0
is_test_only: true
team_owner: "Storage Engines"
testscenarios:
homepage_url: https://launchpad.net/testscenarios
open_hub_url: https://www.openhub.net/p/testscenarios
release_monitoring_id: 13220
local_directory_path: src/third_party/wiredtiger/test/3rdparty/testscenarios-0.4
is_test_only: true
team_owner: "Storage Engines"
google-re2:
homepage_url: https://github.com/google/re2
open_hub_url: https://www.openhub.net/p/google-re2
release_monitoring_id: 10500
local_directory_path: src/third_party/re2
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-75761
testing-cabal/extras:
homepage_url: https://github.com/testing-cabal/extras
open_hub_url: https://www.openhub.net/p/550227
release_monitoring_id: 13192
local_directory_path: src/third_party/wiredtiger/test/3rdparty/extras-0.0.3
is_test_only: true
team_owner: "Storage Engines"
SchemaStore/schemastore:
homepage_url: https://www.schemastore.org/
open_hub_url: N/A
release_monitoring_id: -1
local_directory_path: src/third_party/schemastore.org
is_test_only: true
team_owner: "Query Optimization"
# Note: This is a test-only library and not compiled into the server.
"SCons - a Software Construction tool":
homepage_url: https://www.scons.org/
open_hub_url: https://www.openhub.net/p/scons
release_monitoring_id: 4770
local_directory_path: src/third_party/scons-3.1.2
team_owner: "Build"
upgrade_suppression: TODO SERVER-49324
smhasher:
homepage_url: https://github.com/aappleby/smhasher
open_hub_url: https://www.openhub.net/p/smhasher
release_monitoring_id: -1
local_directory_path: src/third_party/murmurhash3
team_owner: "Storage Execution"
"Snowball Stemming Algorithms":
homepage_url: https://snowballstem.org/
open_hub_url: https://www.openhub.net/p/Snowball_Stemming_Algorithms
release_monitoring_id: 7853
local_directory_path: src/third_party/libstemmer_c
team_owner: "Query Integration"
upgrade_suppression: TODO SERVER-51478
subunit:
homepage_url: https://launchpad.net/subunit
open_hub_url: N/A
release_monitoring_id: 85461
local_directory_path: src/third_party/wiredtiger/test/3rdparty/python-subunit-1.4.4
is_test_only: true
team_owner: "Storage Engines"
unicode:
homepage_url: http://www.unicode.org
open_hub_url: N/A
release_monitoring_id: 5045
local_directory_path: src/third_party/unicode-8.0.0
team_owner: "Query Execution"
valgrind:
homepage_url: https://valgrind.org/
open_hub_url: https://www.openhub.net/p/valgrind
release_monitoring_id: 13639
local_directory_path: src/third_party/valgrind
team_owner: "Build"
upgrade_suppression: TODO SERVER-71860
testtools:
homepage_url: https://launchpad.net/testtools
open_hub_url: https://www.openhub.net/p/python-testtools
release_monitoring_id: 4047
local_directory_path: src/third_party/wiredtiger/test/3rdparty/testtools-2.7.1
is_test_only: true
team_owner: "Storage Engines"
tcmalloc:
homepage_url: https://github.com/google/tcmalloc
open_hub_url: https://openhub.net/p/tcmalloc
release_monitoring_id: -1 # (371589) but there are no version numbers
local_directory_path: src/third_party/tcmalloc
team_owner: "Service Arch"
zlib:
homepage_url: https://www.zlib.net/
open_hub_url: https://www.openhub.net/p/zlib
release_monitoring_id: 5303
local_directory_path: src/third_party/zlib
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-90307
zstd:
homepage_url: http://www.zstd.net/
open_hub_url: https://www.openhub.net/p/zstd
release_monitoring_id: 12083
local_directory_path: src/third_party/zstandard
team_owner: "Service Arch"
upgrade_suppression: TODO SERVER-88708
|
