# Legal Report

Package:  virtualbox
Checkout: 89fa880298c1fcf09e0bdd4155da836448a7434e6d931d0569fcc5c39c70e282
Unpacked: 57220 files (1.3GiB)



## System Notice

Manual review is required because no previous reports are available



## Licenses

**Warning** Elevated risk, package might contain incompatible licenses: GPL-2.0-only, Apache-2.0


Note: Report is incomplete, reviewers need to create new license patterns for unmatched keywords or ignore false
positive matches. Estimated risks for each file are based on the highest risk snippet. The lower its similarity to
existing license patterns, the higher the risk will climb above the predicted license.


### Risk 9 (Unknown)

* `VirtualBox-7.2.4/doc/License-gpl-3.0.html`: 43.2% similarity to "Keyword", estimated risk 9
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-digia-qt-6.8.0.dita`: 35.2% similarity to "Keyword", estimated risk 9
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libpng-1.6.45.dita`: 75.2% similarity to "Keyword", estimated risk 9
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/LICENSE`: 75.2% similarity to "Keyword", estimated risk 9
* `VirtualBox-7.2.4/doc/License-gpl-3.0.txt`: 24% similarity to "GPL-3.0-or-later", estimated risk 8
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libslirp-4.9.1.dita`: 17.2% similarity to "Public-Domain", estimated risk 8
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-opus-1.3.1.processed.dita`: 23.9% similarity to "AOMPL-1.0", estimated risk 8
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-slirp-1.0.16.dita`: 16.3% similarity to "Public-Domain", estimated risk 8
* `VirtualBox-7.2.4/COPYING`: 35.6% similarity to "GPL-3.0-or-later", estimated risk 7
* `VirtualBox-7.2.4/doc/License-gpl-3.0.processed.rtf`: 35.7% similarity to "CDDL-1.0", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-glib-2.76.4.processed.dita`: 30.4% similarity to "LGPL-3.0-only", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-glibc-2.17-326.0.9.el7_9.dita`: 29.2% similarity to "LGPL-2.1-or-later", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-gsoap-2.8.136.dita`: 27.4% similarity to "GPL-2.0+ OR Commercial", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-gtk3-gnome-desktop-3.24.43.dita`: 37.5% similarity to "GPL-Unspecified", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-ipxe-1.21.1.processed.dita`: 29.5% similarity to "GPL-3.0-or-later", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-jpeg-image-decoding-software-9f.dita`: 48.6% similarity to "Any permissive adv", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libssh-0.11.2.processed.dita`: 29.5% similarity to "GPL-Unspecified", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-linux-kernel-6.15.4.dita`: 34.6% similarity to "GPL-2.0-or-later OR CC-BY-4.0", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-llvm-20.1.4.processed.dita`: 39.3% similarity to "Apache-2.0", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-nullsoft-scriptable-install-system-nsis-3.10.processed.dita`: 30.9% similarity to "CPL-1.0", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-python-3.10.15.processed.dita`: 30.9% similarity to "Python >=2.0.1", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.6.5.dita`: 35.7% similarity to "CDDL-1.0", estimated risk 7
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/BaseTools/Source/C/VfrCompile/Pccts/h/DLG_stream_input.h`: 34.3% similarity to "GPL-Unspecified", estimated risk 7
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdePkg/Include/Protocol/MmReadyToLock.h`: 28.4% similarity to "BSD-2-Clause-Patent", estimated risk 7
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdePkg/Include/Protocol/S3SmmSaveState.h`: 35.6% similarity to "BSD-2-Clause-Patent", estimated risk 7
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdePkg/Include/Protocol/SmmReadyToLock.h`: 28% similarity to "BSD-2-Clause-Patent", estimated risk 7
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/OvmfPkg/AmdSev/SecretDxe/SecretDxe.c`: 45% similarity to "BSD-2-Clause-Patent", estimated risk 7
* `VirtualBox-7.2.4/src/VBox/Main/.scm-settings`: 32.3% similarity to "Any reference local", estimated risk 7
* `VirtualBox-7.2.4/src/libs/dxmt-0.60/external/nvapi/docs/R570_NVAPI_OpenSource_Release_Notes/R570_NVAPI_OpenSource_Release_Notes.processed.txt`: 20.2% similarity to "Any Permissive", estimated risk 7
* `VirtualBox-7.2.4/src/libs/libjpeg-turbo-3.1.0/java/README`: 25.7% similarity to "BSD-Unspecified", estimated risk 7
* `VirtualBox-7.2.4/src/libs/libslirp-4.9.1/COPYRIGHT`: 30.5% similarity to "Public-Domain", estimated risk 7
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/doc/man3/RSA_set_method.pod`: 28.8% similarity to "Any reference local", estimated risk 7
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/ssl/record/methods/ssl3_cbc.c`: 41.1% similarity to "OpenSSL", estimated risk 7
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-a-profile-architecture-2024-12.processed.dita`: 40.5% similarity to "BSD-3-Clause", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libjpeg-turbo-3.1.0.processed.dita`: 40.1% similarity to "IJG", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-moltenvk-1.1.9.dita`: 44.4% similarity to "Apache-2.0", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-mozilla-suite-1.8a4-1.dita`: 56.5% similarity to "MPL-1.1", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-openssl-3.4.1.dita`: 43.3% similarity to "Apache-2.0", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-pulseaudio-10.0-6.dita`: 41% similarity to "LGPL-2.1-only", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-pylibfdt-1.7.2.dita`: 49.6% similarity to "GPL-2.0-or-later", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-vulkan-headers-1.3.289.dita`: 44.6% similarity to "Apache-2.0", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.13.0.dita`: 43.5% similarity to "MIT", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.4.2.dita`: 43.3% similarity to "X11", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.8.0.dita`: 43.4% similarity to "MIT", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.9.0.dita`: 36.8% similarity to "X11", estimated risk 6
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-ext/licensing-license-vbox-ext-curl-8.11.1.dita`: 43.3% similarity to "Apache-2.0", estimated risk 6
* `VirtualBox-7.2.4/include/.scm-settings`: 41.7% similarity to "LGPL Unspecified", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Additions/x11/x11include/xorg-server-1.4.2/xf86PciStdIds.processed.h`: 43.5% similarity to "BSD-3-Clause", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/EmbeddedPkg/Include/Protocol/FdtClient.h`: 49.2% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/License-History.txt`: 57.3% similarity to "EPL-1.0", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Core/DxeIplPeim/DxeLoad.processed.c`: 38.7% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Library/LockBoxLib.h`: 40.6% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Ppi/MigrateTempRam.h`: 37.2% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Protocol/BootLogo2.h`: 41.8% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Protocol/SmmExitBootServices.h`: 44.6% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Protocol/SmmLegacyBoot.h`: 44.8% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Protocol/SmmReadyToBoot.h`: 46.2% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdePkg/Include/Ppi/MemoryDiscovered.h`: 37.7% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/OvmfPkg/Include/Protocol/VirtioDevice.h`: 42.8% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/OvmfPkg/Library/PeilessStartupLib/DxeLoad.processed.c`: 39.1% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/OvmfPkg/ResetVector/X64/OvmfSevMetadata.asm`: 42.6% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/SecurityPkg/Library/DxeTpmMeasurementLib/DxeTpmMeasurementLib.inf`: 41.1% similarity to "BSD-2-Clause-Patent", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/VBoxPkg/Logo/Logo.c`: 54.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/Devices/PC/DevQemuFwCfg.processed.cpp`: 39.6% similarity to "GPL-3.0-only", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/ExtPacks/VBoxDTrace/.scm-settings`: 59.8% similarity to "CDDL-1.0", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/ExtPacks/VBoxDTrace/VBoxDTraceR0A.asm`: 59.8% similarity to "CDDL-1.0", estimated risk 6
* `VirtualBox-7.2.4/src/VBox/ExtPacks/VBoxDTrace/VBoxDTraceWrapper.processed.cpp`: 59.8% similarity to "CDDL-1.0", estimated risk 6
* `VirtualBox-7.2.4/src/libs/libjpeg-turbo-3.1.0/LICENSE.md`: 38.1% similarity to "Any reference local", estimated risk 6
* `VirtualBox-7.2.4/src/libs/libxml2-2.13.8/libxml2.doap`: 39.5% similarity to "Any reference local", estimated risk 6
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/modes/asm/aes-gcm-armv8-unroll8_64.processed.pl`: 55.4% similarity to "OpenSSL", estimated risk 6
* `VirtualBox-7.2.4/doc/License-gpl-2.processed.rtf`: 58.2% similarity to "GPL-2.0 WITH Linking-exception", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-glslang-11.9.0.processed.dita`: 69.9% similarity to "GPL-3.0-or-later", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libvpx-1.14.1.dita`: 67.9% similarity to "BSD-3-Clause", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-linux-kernel-5.10.110.processed.dita`: 54.3% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-wix-windows-installer-xml-toolset-5.0.2.processed.dita`: 73.4% similarity to "MS-RL", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.11.0.dita`: 45.8% similarity to "SGI-B-2.0", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.14.0.dita`: 53.2% similarity to "X11", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.18.0.dita`: 50.7% similarity to "SGI-B-2.0", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.5.3.dita`: 47.3% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.7.7.dita`: 54.5% similarity to "X11", estimated risk 5
* `VirtualBox-7.2.4/include/VBox/vmm/trpm.h`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/glx/singlepix.c`: 55.3% similarity to "SGI-B-2.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Additions/common/VBoxGuest/.scm-settings`: 61% similarity to "GPL-2.0-only OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Additions/common/VBoxGuest/VBoxGuest-os2.processed.cpp`: 52.3% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Additions/common/VBoxGuest/VBoxGuestA-os2.processed.asm`: 52.5% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Additions/solaris/.scm-settings`: 62.4% similarity to "GPL-2.0-only OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Artwork/win/.scm-settings`: 73.1% similarity to "GPL-2.0-only OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Guid/RecoveryDevice.h`: 51% similarity to "BSD-2-Clause-Patent", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Protocol/BootLogo.h`: 52.4% similarity to "BSD-2-Clause-Patent", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/SecurityPkg/Library/DxeTpmMeasurementLib/DxeTpmMeasurementLib.c`: 46.7% similarity to "BSD-2-Clause-Patent", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/StandaloneMmPkg/Include/Guid/MmramMemoryReserve.h`: 54.7% similarity to "BSD-3-Clause", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Devices/PC/ipxe/src/drivers/net/eepro100.c`: 61.6% similarity to "GPL-2.0+", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Devices/PC/ipxe/src/include/compiler.h`: 50.7% similarity to "GPL-2.0+ OR UBDL OR BSD-2-Clause", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/HostDrivers/.scm-settings`: 63.3% similarity to "GPL-2.0-only OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/HostDrivers/Support/linux/SUPWrapperMod-linux.processed.c`: 60.8% similarity to "GPL-Unspecified", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/HostDrivers/win/loadall.processed.cmd`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Installer/.processed.scm-settings`: 52.1% similarity to "GPL-3.0-only", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Installer/common/vboxapisetup.py`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Main/glue/python/pyproject.toml`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/common/checksum/alt-md5.processed.cpp`: 54.7% similarity to "Public-Domain", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/common/ldr/ldrLX.processed.cpp`: 52.4% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/common/ldr/ldrMachO.processed.cpp`: 52% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/common/string/uniread.processed.cpp`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/freebsd/memobj-r0drv-freebsd.processed.c`: 54.9% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/netbsd/memobj-r0drv-netbsd.processed.c`: 54.5% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/netbsd/semeventmulti-r0drv-netbsd.processed.c`: 55.8% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/nt/ntBldSymDb.processed.cpp`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/os2/RTR0Os2DHQueryDOSVar.asm`: 54.2% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/os2/assert-r0drv-os2.processed.cpp`: 55.5% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/os2/timerA-r0drv-os2.asm`: 55.5% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/r3/os2/RTTimeSet-os2.processed.cpp`: 55.2% similarity to "MIT", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/Runtime/testcase/tstLdr-4Imp-win.def`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/ValidationKit/.scm-settings`: 60.9% similarity to "GPL-2.0-only OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/ValidationKit/bootsectors/bs3-cpu-generated-1-data.processed.py`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/ValidationKit/bootsectors/bs3kit/Makefile.processed.kmk`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/ValidationKit/testmanager/core/globalresource.processed.pgsql`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/ValidationKit/utils/TestExecServ/win/vboxtxs-add-task-nat.cmd`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/VBox/ValidationKit/utils/TestExecServ/win/vboxtxs.xml`: 62.5% similarity to "GPL-2.0 OR CDDL-1.0", estimated risk 5
* `VirtualBox-7.2.4/src/libs/libogg-1.3.5/doc/rfc5334.txt`: 46.1% similarity to "BSD-3-Clause", estimated risk 5
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/CMakeLists.txt`: 47.2% similarity to "Libpng", estimated risk 5
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/contrib/tools/intgamma.sh`: 55% similarity to "Public-Domain", estimated risk 5
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/scripts/cmake/test.cmake.in`: 54.7% similarity to "Libpng", estimated risk 5
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/modes/asm/aes-gcm-armv8_64.processed.pl`: 73.2% similarity to "OpenSSL", estimated risk 5
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/poly1305/asm/poly1305-ppc.pl`: 66.1% similarity to "OpenSSL", estimated risk 5
* `VirtualBox-7.2.4/src/libs/xpcom18a4/java/tools/gen-nsError.processed.pl`: 81.7% similarity to "MPL-1.1", estimated risk 5
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-alsa-lib-1.1.4.1.dita`: 67.8% similarity to "LGPL-2.1-or-later", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-cereal-1.3.2.dita`: 86% similarity to "Zlib", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-compositeproto-0.4.2.processed.dita`: 62% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-curl-8.11.1.dita`: 85.6% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-dnsproxy-1.15.dita`: 82.2% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-dri2proto-2.8.processed.dita`: 85.2% similarity to "XFree86", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-dxmt-0.60.dita`: 78.7% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-dxvk-2.6.2.dita`: 82.5% similarity to "Zlib", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-edk2-edk2-stable202405.dita`: 89.8% similarity to "BSD-4-clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-egl-registry-ac494c21.dita`: 78.1% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-fixesproto-5.0.processed.dita`: 62% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-fontsproto-2.1.3.processed.dita`: 83.9% similarity to "XFree86", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-freebsd-7.2.dita`: 89.9% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-glproto-1.4.17.processed.dita`: 87.3% similarity to "SGI-B-2.0", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-inputproto-1.9.99.902.dita`: 80.1% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-kbproto-1.0.7.processed.dita`: 74.8% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libgd-2.3.3.dita`: 61.5% similarity to "ISC", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libogg-1.3.5.dita`: 84.7% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libpam-1.1.8-23.dita`: 76.3% similarity to "BSD-3-Clause OR GPL-2.0-or-later", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libpciaccess-0.10.8.dita`: 75.3% similarity to "XFree86", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libxcomposite-0.4.5.dita`: 66.3% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libxdamage-1.1.5.dita`: 74.5% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libxext-1.3.4.dita`: 56.4% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libxfixes-4.0.3.dita`: 76.8% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libxml2-2.13.2.dita`: 75.7% similarity to "Any Permissive", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-lightweight-tcp-ip-stack-lwip-2.2.1.dita`: 89.4% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-lzf-3.6.dita`: 89.9% similarity to "BSD-2-Clause OR GPL-2.0+", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-nasm-2.16.03.dita`: 74.6% similarity to "BSD-2-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-nsis-nsprocess-plugin-1.6.processed.dita`: 75.1% similarity to "Zlib", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-openvr-2.5.1.dita`: 89.4% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-pixman-0.43.4.dita`: 65.5% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-plex86-bochs-lgpl-vgabios-0.5c.dita`: 67.9% similarity to "LGPL-2.1-or-later", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-randrproto-1.5.0.processed.dita`: 78.3% similarity to "HPND", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-reference-implementations-for-intel-arch.processed.dita`: 81.2% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-renderproto-0.11.1.processed.dita`: 68.4% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-spir-v-headers-1.3.283.dita`: 78.1% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-wayland-1.20.0.dita`: 80.1% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-wine-1.5.14.processed.dita`: 89.6% similarity to "LGPL-2.1-or-later", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xextproto-7.1.1.dita`: 87.6% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xf86-input-mouse-1.0.4.dita`: 85.9% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xf86-video-vesa-1.0.1.3.dita`: 76.9% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xf86driproto-2.1.1.processed.dita`: 84% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xfree86--vidmode-extension-4.3.processed.dita`: 77.6% similarity to "XFree86", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xorg-server-1.3.0.0.dita`: 85.3% similarity to "MIT WITH Advertising-Clause", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-xproto-7.0.31.processed.dita`: 58.1% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-ext/licensing-license-vbox-ext-openssl-3.4.1.dita`: 84.8% similarity to "Apache-2.0", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-ext/licensing-license-vbox-ext-zlib-data-compression-library-1.3.1.dita`: 86% similarity to "Zlib", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/docs/license.rst`: 82.6% similarity to "Any reference local", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/glx/renderpix.c`: 76.4% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/gtest/include/gtest/internal/gtest-death-test-internal.h`: 79.3% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/gtest/include/gtest/internal/gtest-filepath.h`: 82% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Additions/x11/vboxvideo/setmode.processed.c`: 84.1% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdeModulePkg/Include/Ppi/SecPerformance.h`: 60.6% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/MdePkg/Include/ConfidentialComputingGuestAttr.h`: 57.6% similarity to "BSD-2-Clause-Patent", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/OvmfPkg/Library/CcExitLib/CcInstruction.h`: 57.7% similarity to "BSD-2-Clause-Patent", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/VBoxPkg/VBoxFsDxe/fsw_base.h`: 63% similarity to "BSD-3-Clause OR GPL-2.0-only", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Devices/PC/ipxe/src/arch/x86/include/pxe_api.h`: 63.9% similarity to "GPL-2.0-or-later OR MIT", estimated risk 4
* `VirtualBox-7.2.4/src/VBox/Runtime/r0drv/netbsd/alloc-r0drv-netbsd.processed.c`: 60.9% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/src/bldprogs/scmrw.processed.cpp`: 88.1% similarity to "LGPL-2.1", estimated risk 4
* `VirtualBox-7.2.4/src/libs/dxmt-0.60/external/nvapi/License.txt`: 80.7% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/src/libs/dxvk-2.6.2/include/spirv/LICENSE`: 88.2% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/ci/targets/linux/ci_env.aarch64-linux-gnu.sh`: 67.7% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/contrib/pngexif/bytepack.py`: 69.5% similarity to "MIT", estimated risk 4
* `VirtualBox-7.2.4/src/libs/lwip-2.2.1/codespell_check.sh`: 68.2% similarity to "Any reference local", estimated risk 4
* `VirtualBox-7.2.4/src/libs/lwip-2.2.1/src/netif/ppp/mppe.c`: 73.5% similarity to "X11", estimated risk 4
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/bn/asm/sparct4-mont.pl`: 89.7% similarity to "OpenSSL OR BSD-2-Clause", estimated risk 4
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/des/asm/dest4-sparcv9.pl`: 84.1% similarity to "OpenSSL OR BSD-2-Clause", estimated risk 4
* `VirtualBox-7.2.4/src/libs/softfloat-3e/doc/SoftFloat-source.html`: 87.1% similarity to "BSD-3-Clause", estimated risk 4
* `VirtualBox-7.2.4/src/libs/zlib-1.3.1/FAQ`: 78.3% similarity to "Any reference local", estimated risk 4
* `VirtualBox-7.2.4/src/libs/zlib-1.3.1/zlib.3`: 87.8% similarity to "Zlib", estimated risk 4
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-libtpms-0.10.1.dita`: 94.5% similarity to "Any specification license", estimated risk 3
* `VirtualBox-7.2.4/src/libs/libtpms-0.10.1/src/tpm2/X509_spt.c`: 99.4% similarity to "Any specification license", estimated risk 3
* `VirtualBox-7.2.4/doc/manual/en_US/dita/licensing/vbox-base/licensing-license-vbox-base-qemu-0.10.0.dita`: 91.6% similarity to "MIT", estimated risk 2
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/gtest/include/gtest/internal/gtest-string.h`: 93.6% similarity to "BSD-3-Clause", estimated risk 2
* `VirtualBox-7.2.4/src/VBox/Devices/EFI/Firmware/OvmfPkg/Library/CcProbeLib/SecPeiCcProbeLib.c`: 93.1% similarity to "BSD-2-Clause-Patent", estimated risk 2
* `VirtualBox-7.2.4/src/libs/libpng-1.6.45/TRADEMARK`: 98.1% similarity to "Libpng", estimated risk 2
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/LPdir_unix.c`: 92.9% similarity to "BSD-2-Clause OR OpenSSL", estimated risk 2
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/c11/threads.h`: 99.3% similarity to "BSL-1.0", estimated risk 1
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/gallium/drivers/d3d12/d3d12_video_dec_vp9.processed.h`: 99.1% similarity to "MIT", estimated risk 1
* `VirtualBox-7.2.4/src/VBox/Additions/3D/mesa/mesa-24.0.2/src/imagination/rogue/rogue_isa.h`: 100% similarity to "MIT", estimated risk 1
* `VirtualBox-7.2.4/src/libs/libvorbis-1.3.7/doc/rfc5215.txt`: 100% similarity to "Any Permissive", estimated risk 1
* `VirtualBox-7.2.4/src/libs/libxml2-2.13.8/list.c`: 94.4% similarity to "Any Permissive", estimated risk 1
* `VirtualBox-7.2.4/src/libs/lwip-2.2.1/src/core/ipv4/dhcp.processed.c`: 98.8% similarity to "BSD-3-Clause", estimated risk 1
* `VirtualBox-7.2.4/src/libs/lwip-2.2.1/src/include/netif/ppp/eap.h`: 94.3% similarity to "HPND", estimated risk 1
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/LPdir_vms.c`: 99% similarity to "BSD-2-Clause OR OpenSSL", estimated risk 1
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/aes/asm/aest4-sparcv9.pl`: 96.6% similarity to "OpenSSL OR BSD-2-Clause", estimated risk 1
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/camellia/asm/cmllt4-sparcv9.pl`: 96.6% similarity to "OpenSSL OR BSD-2-Clause", estimated risk 1
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/x509/v3_pci.c`: 98.6% similarity to "OpenSSL OR BSD-3-Clause", estimated risk 1
* `VirtualBox-7.2.4/src/libs/openssl-3.4.1/crypto/x509/v3_pcia.c`: 95.1% similarity to "OpenSSL OR BSD-3-Clause", estimated risk 1


### Risk 6 (High)

* Any Proprietary: 1 file
* Any non commercial: 2 files



### Risk 5 (High)

* Any EULA: 1 file
* Any patent warning: 2 files
* Any trademark notice: 3 files
* Any unresolved: 2 files



### Risk 4 (High)

* Any permissive odd: 1 file
* BSD-2-Clause-Patent: 1176 files
* CDDL-1.0: 1548 files
* CPL-0.5: 1 file
* CPL-1.0: 2 files
* NPL-1.1: 5 files
* SGI-B-1.1: 7 files
* UBDL: 2 files



### Risk 3 (Low)

* AGPL-3.0-or-later: 1 file
* Any Patent: 1 file
* Any no warranty: 5 files
* Any reciprocal clause: 1 file
* Any reference local: 13 files
* Any specification license: 400 files
* Any technical limitation: 1 file
* Apache-2.0: 4129 files
* BSD-3-Clause: 39 files
* BSD-4-clause: 8 files
* GPL-2.0-only OR CDDL-1.0: 1 file
* GPL-2.0-only OR MPL-1.1: 3 files
* GPL-2.0-or-later: 1 file
* GPL-2.0-only WITH Linux-syscall-note: 1 file
* GPL-3.0-only: 2 files
* GPL-3.0-or-later: 7 files
* GPL-Unspecified: 3632 files
* LGPL Unspecified: 7 files
* MIT OR GPL-3.0-or-later: 1 file
* OR Commercial: 1 file
* OpenSSL: 134 files
* subversion: 2 files



### Risk 2 (Low)

* AFL-2.1 OR GPL-2.0-only: 1 file
* All Rights Reserved: 6982 files
* Any GPL permissive addon: 1 file
* Any perm mark changes: 2 files
* Any permissive keep free: 6 files
* Any reference local: 1884 files
* Any trademark: 41 files
* Artistic-1.0-Perl OR GPL-1.0-or-later: 6 files
* BSD-2-Clause: 2 files
* BSD-2-Clause-Patent: 7585 files
* BSD-3-Clause: 1 file
* BSD-4-Clause OR GPL-2.0-or-later: 13 files
* BSD-Unspecified: 42 files
* CC-BY-3.0: 1 file
* CDDL-1.0: 2 files
* GFDL-1.3-only: 1 file
* GPL-1.0-only: 1 file
* GPL-1.0-or-later WITH Linux-syscall-note: 1 file
* GPL-2.0-only: 48 files
* GPL-2.0-only WITH Classpath-exception-2.0: 4 files
* GPL-2.0 WITH Linking-exception: 29 files
* GPL-2.0-or-later: 228 files
* GPL-2.0-or-later OR CDDL-1.1: 1 file
* GPL-2.0+ OR UBDL: 527 files
* GPL-3.0-or-later: 2 files
* GPL-3.0-only: 3566 files
* GPL-Unspecified: 3 files
* IETF: 4 files
* Libpng: 3 files
* MPL-1.1 OR LGPL-2.1-or-later OR GPL-2.0-or-later: 428 files
* NPL-1.1 OR LGPL-2.1-or-later OR GPL-2.0-or-later: 5 files
* UBDL: 1 file
* VP8: 1 file
* XFree86: 72 files
* regex: 46 files
* regex adv: 2 files



### Risk 1 (Low)

* 0BSD: 164 files
* Any CLA: 2 files
* Any Copyright Notice Retention: 1 file
* Any Permissive: 253 files
* Any copyright: 9 files
* Any disclaimer: 3 files
* Any distributed with: 16 files
* Any floating warranty: 114 files
* Any no warranty: 3 files
* Any reference local: 3 files
* Apache-2.0 OR BSD-2-Clause: 2 files
* Apache-2.0 OR MIT: 19 files
* BSD-2-Clause: 72 files
* BSD-2-Clause OR GPL-2.0-or-later: 17 files
* BSD-2-Clause-Patent: 5 files
* BSD-3-Clause: 1411 files
* BSD-3-Clause OR GPL-2.0-or-later: 5 files
* BSD-4-clause-UC: 2 files
* BSD-Unspecified: 1 file
* BSL-1.0: 4 files
* Beerware: 1 file
* CC0-1.0: 6 files
* DCO: 2 files
* FSF unlimited: 39 files
* GPL-2.0 OR ANY: 6 files
* GPL-2.0-only OR BSD-2-Clause: 3 files
* GPL-2.0-only OR MIT: 20 files
* GPL-2.0-or-later OR MIT: 2 files
* GPL-2.0+ OR UBDL OR BSD-2-Clause: 5 files
* GPL-2.0-or-later WITH Autoconf-exception-3.0: 3 files
* GPL-2.0-or-later WITH Bison-exception-2.2: 4 files
* GPL-2.0-or-later WITH Libtool-exception: 6 files
* GPL-2.0-or-later OR BSD-2-Clause: 1 file
* GPL-3.0-only WITH Bison-exception-2.2: 9 files
* GPL-3.0-or-later: 3 files
* GPL-3.0-or-later WITH Autoconf-exception-3.0: 1 file
* GPL-3.0+ WITH Bison-Exception-2.2: 5 files
* HPND: 1048 files
* IJG: 1 file
* ISC: 899 files
* LGPL-2.0-only: 1 file
* LGPL-2.0-or-later: 47 files
* LGPL-2.1-only: 665 files
* LGPL-2.1-or-later: 719 files
* LGPL-2.1-only: 4 files
* LGPL-2.1-or-later: 1 file
* Libpng: 127 files
* Linking-Exception: 1 file
* MIT: 8438 files
* MIT OR Apache-2.0: 4 files
* MIT WITH Advertising-Clause: 636 files
* MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later: 63 files
* MPL-1.1 OR LGPL-2.1-or-later OR BSD-3-Clause OR GPL-2.0-or-later: 2 files
* NCSA: 1 file
* OpenSSL: 2 files
* PSF-2.0: 1 file
* Public-Domain: 181 files
* Python 2.1.1: 1 file
* Python >=2.0.1: 1 file
* Qt-Company-GPL-Exception-1.0: 1 file
* SGI-B-2.0: 274 files
* X11: 2696 files
* XFree86: 10 files
* Zlib: 90 files
* bzip2-1.0.6: 1 file
* curl: 370 files
* jQuery: 3 files
* openSUSE specfile: 1 file



### Risk 0 (Low)

* SUSE-FSF: 47 files
* Suse Copyright: 159 files



## About

This plain text report was generated by Cavil. For more details please consult the HTML and SPDX reports.