# Legal Report Package: librepods Checkout: dfed238cb3d0f4a85ad58ec698f6df6f77bf405172f6c5a12d4e6d8757dc745d Unpacked: 274625 files (741MiB) ## System Notice Diff to closest match 502715: Different spec file license: GPL-3.0-or-later Found new license Any CLA (risk 4) not present in old report ## Licenses **Warning** Elevated risk, package might contain incompatible licenses: GPL-2.0-only, Apache-2.0 Note: Report is incomplete, reviewers need to create new license patterns for unmatched keywords or ignore false positive matches. Estimated risks for each file are based on the highest risk snippet. The lower its similarity to existing license patterns, the higher the risk will climb above the predicted license. ### Risk 9 (Unknown) * `vendor/vendor/libdbus-sys-0.2.6/vendor/dbus/CONTRIBUTING.md`: 24.8% similarity to "Keyword", estimated risk 9 * `vendor/vendor/wayland-protocols-plasma-0.3.9/plasma-wayland-protocols/src/protocols/kde-primary-output-v1.processed.xml`: 97.9% similarity to "Keyword", estimated risk 9 * `vendor/vendor/wayland-protocols-plasma-0.3.9/plasma-wayland-protocols/src/protocols/kde-screen-edge-v1.xml`: 97.9% similarity to "Keyword", estimated risk 9 * `vendor/vendor/wayland-protocols-plasma-0.3.9/plasma-wayland-protocols/src/protocols/outputdevice.xml`: 97.9% similarity to "Keyword", estimated risk 9 * `librepods-0.1.0/README.processed.md`: 41.5% similarity to "AGPL-3.0-only", estimated risk 7 * `vendor/vendor/dpi-0.1.2/README.processed.md`: 22.5% similarity to "MIT OR Apache-2.0", estimated risk 7 * `vendor/vendor/glam-0.25.0/README.md`: 24.1% similarity to "MIT", estimated risk 7 * `vendor/vendor/libdbus-sys-0.2.6/README.processed.md`: 34.9% similarity to "GPL-2.0-or-later", estimated risk 7 * `vendor/vendor/libdbus-sys-0.2.6/vendor/dbus/m4/ax_code_coverage.processed.m4`: 40.2% similarity to "LGPL-2.1-or-later", estimated risk 7 * `vendor/vendor/cfg-expr-0.15.8/CONTRIBUTING.processed.md`: 39.5% similarity to "Apache-2.0", estimated risk 6 * `vendor/vendor/dbus-0.9.9/README.processed.md`: 43.8% similarity to "MIT OR Apache-2.0", estimated risk 6 * `vendor/vendor/dbus-tokio-0.7.6/README.processed.md`: 43.6% similarity to "MIT OR Apache-2.0", estimated risk 6 * `vendor/vendor/dpi-0.1.2/src/libm.rs`: 39.9% similarity to "MIT", estimated risk 6 * `vendor/vendor/fast-srgb8-1.0.0/README.processed.md`: 35.7% similarity to "CC0-1.0", estimated risk 6 * `vendor/vendor/libdbus-sys-0.2.6/vendor/dbus/COPYING.processed`: 55.7% similarity to "AFL-2.1", estimated risk 6 * `vendor/vendor/presser-0.3.1/CONTRIBUTING.processed.md`: 39.5% similarity to "MIT + Apache-2.0", estimated risk 6 * `vendor/vendor/rayon-1.11.0/README.md`: 42% similarity to "MIT OR Apache-2.0", estimated risk 6 * `vendor/vendor/tiny-xlib-0.2.4/CONTRIBUTING.processed.md`: 37.3% similarity to "Any CLA", estimated risk 6 * `vendor/vendor/zerocopy-0.8.27/win-cargo.bat`: 46.3% similarity to "Apache-2.0 OR MIT", estimated risk 6 * `librepods-0.1.0/android/app/src/main/res/raw/aboutlibraries.processed.json`: 63.9% similarity to "Apache-2.0", estimated risk 5 * `vendor/vendor/dconf_rs-0.3.0/README.processed.md`: 61.5% similarity to "MIT", estimated risk 5 * `vendor/vendor/libpulse-sys-1.23.0/src/context/ext_device_restore.processed.rs`: 48.2% similarity to "MIT OR Apache-2.0", estimated risk 5 * `vendor/vendor/moxcms-0.7.9/README.processed.md`: 59.4% similarity to "MIT", estimated risk 5 * `vendor/vendor/portable-atomic-util-0.2.4/README.processed.md`: 58.4% similarity to "Apache-2.0 OR MIT", estimated risk 5 * `vendor/vendor/regex-1.12.2/README.md`: 63.8% similarity to "Apache-2.0 OR MIT", estimated risk 5 * `vendor/vendor/rustybuzz-0.14.1/README.md`: 55.3% similarity to "MIT", estimated risk 5 * `vendor/vendor/winit-0.30.12/src/keyboard.rs`: 61.7% similarity to "W3C", estimated risk 5 * `librepods-0.1.0/AAP Definitions.processed.md`: 97.4% similarity to "AGPL-3.0-only", estimated risk 4 * `librepods-0.1.0/android/app/src/main/java/me/kavishdevar/librepods/composables/BatteryIndicator.kt`: 97.4% similarity to "AGPL-3.0-only", estimated risk 4 * `librepods-0.1.0/android/app/src/main/java/me/kavishdevar/librepods/ui/theme/Theme.kt`: 97.4% similarity to "AGPL-3.0-only", estimated risk 4 * `vendor/vendor/android-activity-0.6.0/LICENSE`: 82.5% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/arbitrary-1.4.2/README.processed.md`: 88.9% similarity to "MIT OR Apache-2.0", estimated risk 4 * `vendor/vendor/bluer-0.17.4/LICENSE.processed`: 73.2% similarity to "BSD-3-Clause", estimated risk 4 * `vendor/vendor/bluer-0.17.4/bluetooth-numbers-database/LICENSE.processed`: 82.7% similarity to "BSD-3-Clause", estimated risk 4 * `vendor/vendor/bluer-0.17.4/src/id.rs`: 82.7% similarity to "BSD-3-Clause", estimated risk 4 * `vendor/vendor/cesu8-1.1.0/COPYRIGHT-RUST.txt`: 73.7% similarity to "BSD-3-Clause", estimated risk 4 * `vendor/vendor/cursor-icon-1.2.0/src/lib.rs`: 60.7% similarity to "Any no adv", estimated risk 4 * `vendor/vendor/fontdb-0.16.2/tests/fonts/LICENSE.txt`: 78.1% similarity to "Public-Domain", estimated risk 4 * `vendor/vendor/glow-0.13.1/README.processed.md`: 81.8% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/half-2.7.1/README.processed.md`: 88.8% similarity to "MIT OR Apache-2.0", estimated risk 4 * `vendor/vendor/iced_glyphon-0.6.0/README.processed.md`: 72.7% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/khronos-egl-6.0.0/README.processed.md`: 72% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/libdbus-sys-0.2.6/vendor/dbus/dbus/dbus-arch-deps.h.in`: 90.8% similarity to "GPL-3.0-or-later", estimated risk 4 * `vendor/vendor/libm-0.2.15/README.md`: 82.1% similarity to "MIT OR Apache-2.0", estimated risk 4 * `vendor/vendor/macaddr-1.0.1/README.md`: 75.5% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/proc-macro-crate-3.4.0/README.processed.md`: 82.4% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/proc-macro-crate-3.4.0/src/lib.processed.rs`: 88.9% similarity to "Apache-2.0 OR MIT", estimated risk 4 * `vendor/vendor/roxmltree-0.20.0/README.processed.md`: 83.7% similarity to "MIT OR Apache-2.0", estimated risk 4 * `vendor/vendor/widestring-1.2.1/README.processed.md`: 83.9% similarity to "MIT OR Apache-2.0", estimated risk 4 * `vendor/vendor/futures-executor-0.3.31/README.md`: 92.3% similarity to "Apache-2.0 OR MIT", estimated risk 3 * `vendor/vendor/gpu-allocator-0.25.0/README.processed.md`: 90.8% similarity to "Apache-2.0 OR MIT", estimated risk 3 * `vendor/vendor/renderdoc-sys-1.1.0/README.md`: 90.2% similarity to "Apache-2.0 OR MIT", estimated risk 3 * `vendor/vendor/xkeysym-0.2.1/README.md`: 91.9% similarity to "Apache-2.0 OR MIT", estimated risk 3 * `vendor/vendor/async-recursion-1.1.1/src/lib.rs`: 95.1% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/block-buffer-0.10.4/README.processed.md`: 95.1% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/gpu-descriptor-0.2.4/README.processed.md`: 95.3% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/libm-0.2.15/LICENSE.txt`: 94.8% similarity to "Apache-2.0", estimated risk 2 * `vendor/vendor/num-rational-0.4.2/README.md`: 95.1% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/polling-3.11.0/README.md`: 94.6% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/toml_datetime-0.7.3/README.md`: 100% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/uuid-1.18.1/README.md`: 94.6% similarity to "Apache-2.0 OR MIT", estimated risk 2 * `vendor/vendor/android_system_properties-0.1.5/CONTRIBUTING.processed.md`: 96.2% similarity to "MIT OR Apache-2.0", estimated risk 1 ### Risk 4 (Medium) * AGPL-3.0-or-later: 1 file * AOMPL-1.0: 1 file * Any CLA: 3 files * BSD-2-Clause AND AOMPL-1.0: 143 files ### Risk 3 (Low) * AFL-2.1: 192 files * Any reference local: 1 file * Apache-2.0 WITH LLVM-exception: 65 files * CC-BY-SA-4.0: 2 files * GPL-2.0-only: 2 files * GPL-2.0-or-later: 194 files * GPL-2.0+ OR Commercial: 1 file * GPL-Unspecified: 4 files * LGPL-2.0-or-later: 1 file * LGPL-2.1-or-later: 5 files * LGPL-2.1-or-later: 18 files * LGPL-Unspecified: 1 file * MPL-2.0: 2 files * OFL-1.1: 4 files * bitstream vera font: 1 file ### Risk 2 (Low) * All Rights Reserved: 22 files * Any floating warranty: 4 files * Any reference local: 98 files * Any trademark: 1 file * Apache-2.0: 586 files * Apache-2.0 OR MIT: 406 files * BSD-2-Clause: 127 files * BSD-3-Clause: 408 files * BSD-Like-Mark-Modifications: 1 file * BSD-Unspecified: 61 files * BSL-1.0: 2 files * BSL-1.0 OR Apache-2.0: 1 file * GPL-2.0-only WITH Font-exception-2.0: 1 file * ISC: 8 files * MIT: 969 files * MIT OR Apache-2.0 OR Zlib: 39 files * Unicode: 1 file * Unicode-TOU: 1 file * W3C: 2 files * Zlib: 38 files * arev font: 1 file * regex: 1 file ### Risk 1 (Low) * 0BSD: 3 files * Any Permissive: 45 files * Any copyright: 11 files * Any copyright notice: 1 file * Any distributed with: 3 files * Any floating warranty: 16 files * Any keep notice: 13 files * Any reference local: 15 files * CC0-1.0: 8 files * DCO: 1 file * FSF unlimited: 1 file * GPL-2.0 OR ANY: 1 file * GPL-2.0-only OR MIT: 2 files * GPL-2.0-or-later OR MIT: 2 files * HPND: 12 files * IJG: 2 files * LGPL-3.0-only OR LGPL-2.1-only: 1 file * MIT + Apache-2.0: 2 files * MIT OR Apache-2.0: 1140 files * MIT OR BSD-2-Clause OR Apache-2.0: 260 files * MIT OR Unlicense: 9 files * Public-Domain: 42 files * TCL: 1 file * Unicode-DFS-2016: 1 file * Unlicense: 12 files * openSUSE specfile: 1 file ### Risk 0 (Low) * Any CLA: 1 file * SUSE-FSF: 4 files * Suse Copyright: 6 files ## About This plain text report was generated by Cavil. For more details please consult the HTML and SPDX reports.