POSTQ CODE SCANNER THIRD-PARTY NOTICES

PostQ Code Scanner-Beta private invite-only evaluation release

This source notice lists the verified product-family baseline. Product builds generate a filtered
copy containing only components distributed in that specific artifact. Full license texts and
component-specific notices are under third-party/licenses and third-party/notices.

Jackson 2.22 components
  Components: jackson-annotations, jackson-core, jackson-databind, jackson-datatype-jsr310
  License: Apache License 2.0 (Apache-2.0)
  Copyright: FasterXML/Jackson contributors; see the preserved Jackson NOTICE.
  Distributed in: CLI, VS Code extension, Eclipse package, OCI container.

SLF4J 2.0.13 components
  Components: slf4j-api, slf4j-simple
  License: MIT
  Copyright: Copyright (c) 2004-2022 QOS.ch Sarl (Switzerland).
  Distributed in: CLI, VS Code extension, Eclipse package, OCI container.

React 18.3.1, React DOM 18.3.1 and Scheduler 0.23.2
  License: MIT
  Copyright: Meta Platforms, Inc. and affiliates.
  Distributed in: VS Code extension, Eclipse package, Scanner Report Viewer.

loose-envify 1.4.0
  License: MIT
  Copyright: Andres Suarez and contributors.
  Distributed in: VS Code extension, Eclipse package, Scanner Report Viewer.

js-tokens 4.0.0
  License: MIT
  Copyright: Simon Lydell.
  Distributed in: VS Code extension, Eclipse package, Scanner Report Viewer.

OpenGrep binary 1.27.1
  Source/installer ref: v1.28.0-interfile.alpha.1
  Source commit: e7202581ac004654035f5bd08f590ef67bd9c95d
  License: GNU Lesser General Public License version 2.1 (LGPL-2.1-only)
  Distributed in: OCI container only in the reviewed implementation.
  OpenGrep is a separate third-party executable and is not owned by PostQ. See SOURCE_INFORMATION.txt.

Red Hat Universal Base Image 9 OpenJDK 21 runtime
  Runtime digest: sha256:41cfee8b4373d0be1c6724ab80a9942e1e4d10bba62c5876455a8028a7a953a2
  License: Red Hat UBI terms plus the licenses of included packages.
  Distributed in: OCI container only.
  The exact per-platform package/license inventory must accompany an approved container release.

No third-party licensor endorses POSTQ SOFTWARE LABS PRIVATE LIMITED or PostQ Code Scanner.