| antlr:antlr | Service Layer (2.7.6) | The BSD 3-Clause License |
| antlr:stringtemplate | Service Layer (2.3b6) | The BSD 3-Clause License |
| ch.qos.logback:logback-access | Service Layer (1.2.3) | LGPL v2.1 |
| ch.qos.logback:logback-classic | Service Layer (1.2.3) | LGPL v2.1 |
| ch.qos.logback:logback-core | Service Layer (1.2.3) | LGPL v2.1 |
| com.auth0:java-jwt | Service Layer (2.3.0) | MIT License |
| com.beust:jcommander | Service Layer (1.48) | Apache License v2.0 |
| com.datadoghq:java-dogstatsd-client | Service Layer (2.1.1) | MIT License |
| com.fasterxml.jackson.core:jackson-annotations | Engine Integration (2.7.0), Import Tool (2.8.9), Public API (2.8.9), Service Layer (2.9.0) | Apache License v2.0 |
| com.fasterxml.jackson.core:jackson-core | Engine Integration (2.7.0), Import Tool (2.8.9), Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.core:jackson-databind | Engine Integration (2.7.0), Import Tool (2.8.4), Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.dataformat:jackson-dataformat-csv | Service Layer (2.7.8) | Apache License v2.0 |
| com.fasterxml.jackson.dataformat:jackson-dataformat-yaml | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.dataformat:jackson-dataformat-yaml | Import Tool (2.8.9) | Apache License v2.0 |
| com.fasterxml.jackson.datatype:jackson-datatype-guava | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.datatype:jackson-datatype-jdk8 | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.datatype:jackson-datatype-joda | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.jaxrs:jackson-jaxrs-base | Import Tool (2.8.4), Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | Import Tool (2.8.4), Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.module:jackson-module-afterburner | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.module:jackson-module-jaxb-annotations | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.jackson.module:jackson-module-jaxb-annotations | Import Tool (2.8.4) | Apache License v2.0 |
| com.fasterxml.jackson.module:jackson-module-parameter-names | Service Layer (2.9.6) | Apache License v2.0 |
| com.fasterxml.woodstox:woodstox-core | Service Layer (5.0.3) | Apache License v2.0 |
| com.fasterxml:classmate | Import Tool (1.3.1), Service Layer (1.3.1) | Apache License v2.0 |
| com.google.code.findbugs:jsr305 | Import Tool (3.0.1), Service Layer (3.0.2) | Apache License v2.0 |
| com.google.code.gson:gson | Service Layer (2.4) | Apache License v2.0 |
| com.google.errorprone:error_prone_annotations | Service Layer (2.2.0) | Apache License v2.0 |
| com.google.guava:failureaccess | Service Layer (1.0.1) | Apache License v2.0 |
| com.google.guava:guava | Service Layer (27.1-jre) | Apache License v2.0 |
| com.google.guava:listenablefuture | Service Layer (9999.0-empty-to-avoid-conflict-with-guava) | Apache License v2.0 |
| com.google.j2objc:j2objc-annotations | Service Layer (1.1) | Apache License v2.0 |
| com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer | Service Layer (r239) | New BSD License |
| com.h2database:h2 | Service Layer (1.4.196) | MPL 2.0 or EPL 1.0 |
| com.jamesmurty.utils:java-xmlbuilder | File Storage (1.1), Service Layer (1.1) | Apache License v2.0 |
| com.papertrail:profiler | Service Layer (1.0.2) | Apache License v2.0 |
| com.rusticisoftware:tincan | Service Layer (1.1.0) | Apache License v2.0 |
| com.sun.mail:javax.mail | Service Layer (1.5.5) | CDDL v1.1 |
| com.sun.mail:mailapi | Service Layer (1.5.6) | CDDL v1.1 |
| com.webcohesion.enunciate:enunciate-core-annotations | Import Tool (2.8.0), Public API (2.8.0), Service Layer (2.8.0) | Apache License v2.0 |
| com.zaxxer:HikariCP | Engine Integration (2.7.4), Service Layer (2.7.6) | Apache License v2.0 |
| commons-codec:commons-codec | File Storage (1.12), Service Layer (1.12) | Apache License v2.0 |
| commons-collections:commons-collections | Service Layer (3.2.2) | Apache License v2.0 |
| commons-io:commons-io | Service Layer (2.6) | Apache License v2.0 |
| commons-lang:commons-lang | Service Layer (2.4) | Apache License v2.0 |
| commons-logging:commons-logging | File Storage (1.2), Service Layer (1.2) | Apache License v2.0 |
| de.svenkubiak:jBCrypt | Service Layer (0.4) | ISC/BSD licence |
| io.dropwizard.metrics:metrics-annotation | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-core | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-healthchecks | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-httpclient | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-jdbi | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-jersey2 | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-jetty9 | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-jmx | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-json | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-jvm | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-logback | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.metrics:metrics-servlets | Service Layer (4.0.2) | Apache License v2.0 |
| io.dropwizard.modules:dropwizard-flyway | Service Layer (1.3.0-1) | Apache License v2.0 |
| io.dropwizard:dropwizard-assets | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-auth | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-client | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-configuration | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-core | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-db | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-forms | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-jackson | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-jdbi | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-jersey | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-jetty | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-lifecycle | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-logging | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-metrics | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-request-logging | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-servlets | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-util | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-validation | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-views | Service Layer (1.3.7) | Apache License v2.0 |
| io.dropwizard:dropwizard-views-freemarker | Service Layer (1.3.7) | Apache License v2.0 |
| javax.activation:activation | File Storage (1.1.1), Service Layer (1.1.1) | CDDL v1.0 |
| javax.annotation:javax.annotation-api | Import Tool (1.2), Service Layer (1.2) | CDDL v1.1 |
| javax.inject:javax.inject | Import Tool (1), Service Layer (1) | Apache License v2.0 |
| javax.servlet:javax.servlet-api | Engine Integration (3.1.0), Service Layer (3.1.0) | CDDL v1.1 |
| javax.validation:validation-api | Import Tool (2.0.0.Final), Public API (2.0.0.Final), Service Layer (2.0.0.Final) | Apache License v2.0 |
| javax.ws.rs:javax.ws.rs-api | Import Tool (2.0.1), Service Layer (2.0.1) | CDDL v1.1 |
| joda-time:joda-time | Service Layer (2.9.9) | Apache License v2.0 |
| junit:junit | Service Layer (4.11) | Common Public License Version 1.0 |
| net.iharder:base64 | File Storage (2.3.8), Service Layer (2.3.8) | Public domain |
| net.java.dev.jets3t:jets3t | File Storage (0.9.4), Service Layer (0.9.4) | Apache License v2.0 |
| net.oauth.core:oauth | Service Layer (20100527) | Apache License v2.0 |
| net.oauth.core:oauth-provider | Service Layer (20100527) | Apache License v2.0 |
| net.shibboleth.tool:xmlsectool | Service Layer (2.0.0) | Apache License v2.0 |
| net.shibboleth.utilities:java-support | Service Layer (7.4.0) | Apache License v2.0 |
| net.sourceforge.argparse4j:argparse4j | Import Tool (0.7.0), Service Layer (0.8.1) | MIT License |
| net.sourceforge.cssparser:cssparser | Service Layer (0.9.26) | Apache License v2.0 |
| org.apache.commons:commons-compress | Service Layer (1.14) | Apache License v2.0 |
| org.apache.commons:commons-lang3 | Import Tool (3.7), Public API (3.7), Service Layer (3.7) | Apache License v2.0 |
| org.apache.commons:commons-text | Import Tool (1.3), Public API (1.3), Service Layer (1.3) | Apache License v2.0 |
| org.apache.httpcomponents:fluent-hc | Service Layer (4.3.6) | Apache License v2.0 |
| org.apache.httpcomponents:httpclient | File Storage (4.5), Service Layer (4.5.5) | Apache License v2.0 |
| org.apache.httpcomponents:httpcore | File Storage (4.4.1), Service Layer (4.4.9) | Apache License v2.0 |
| org.apache.lucene:lucene-analyzers-common | Service Layer (4.7.2) | Apache License v2.0 |
| org.apache.lucene:lucene-core | Service Layer (4.7.2) | Apache License v2.0 |
| org.apache.lucene:lucene-queries | Service Layer (4.7.2) | Apache License v2.0 |
| org.apache.lucene:lucene-queryparser | Service Layer (4.7.2) | Apache License v2.0 |
| org.apache.lucene:lucene-sandbox | Service Layer (4.7.2) | Apache License v2.0 |
| org.apache.santuario:xmlsec | Service Layer (2.0.10) | Apache License v2.0 |
| org.apache.tika:tika-core | Service Layer (1.18) | Apache License v2.0 |
| org.apache.tomcat:tomcat-jdbc | Service Layer (9.0.5) | Apache License v2.0 |
| org.apache.tomcat:tomcat-juli | Service Layer (9.0.5) | Apache License v2.0 |
| org.apache.velocity:velocity | Service Layer (1.7) | Apache License v2.0 |
| org.bouncycastle:bcprov-jdk15on | File Storage (1.52), Service Layer (1.59) | MIT License |
| org.checkerframework:checker-qual | Service Layer (2.5.2) | MIT License |
| org.codehaus.jackson:jackson-core-asl | File Storage (1.9.13), Service Layer (1.9.13) | Apache License v2.0 |
| org.codehaus.jackson:jackson-mapper-asl | File Storage (1.9.13), Service Layer (1.9.13) | Apache License v2.0 |
| org.codehaus.mojo:animal-sniffer-annotations | Service Layer (1.17) | Apache License v2.0 |
| org.codehaus.woodstox:stax2-api | Service Layer (3.1.4) | The BSD License |
| org.coursera:dropwizard-metrics-datadog | Service Layer (1.1.6) | The BSD 3-Clause License |
| org.coursera:metrics-datadog | Service Layer (1.1.6) | The BSD 3-Clause License |
| org.cryptacular:cryptacular | Service Layer (1.2.1) | GNU Lesser General Public License |
| org.eclipse.jetty.toolchain.setuid:jetty-setuid-java | Service Layer (1.0.3) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-client | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-continuation | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-http | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-io | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-security | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-server | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-servlet | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-servlets | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-util | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-webapp | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.eclipse.jetty:jetty-xml | Service Layer (9.4.11.v20180605) | Eclipse Public License v1.0 |
| org.flywaydb:flyway-core | Service Layer (5.0.7) | Apache License v2.0 |
| org.freemarker:freemarker | Service Layer (2.3.27-incubating) | Apache License v2.0 |
| org.glassfish.hk2.external:aopalliance-repackaged | Import Tool (2.5.0-b32), Service Layer (2.5.0-b32) | CDDL v1.1 |
| org.glassfish.hk2.external:javax.inject | Import Tool (2.5.0-b32), Service Layer (2.5.0-b32) | CDDL v1.1 |
| org.glassfish.hk2:hk2-api | Import Tool (2.5.0-b32), Service Layer (2.5.0-b32) | CDDL v1.1 |
| org.glassfish.hk2:hk2-locator | Import Tool (2.5.0-b32), Service Layer (2.5.0-b32) | CDDL v1.1 |
| org.glassfish.hk2:hk2-utils | Import Tool (2.5.0-b32), Service Layer (2.5.0-b32) | CDDL v1.1 |
| org.glassfish.hk2:osgi-resource-locator | Import Tool (1.0.1), Service Layer (1.0.1) | CDDL v1.1 |
| org.glassfish.jersey.bundles.repackaged:jersey-guava | Import Tool (2.25.1), Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.connectors:jersey-apache-connector | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.containers:jersey-container-servlet | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.containers:jersey-container-servlet-core | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.core:jersey-client | Import Tool (2.25.1), Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.core:jersey-common | Import Tool (2.25.1), Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.core:jersey-server | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.ext.rx:jersey-rx-client | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.ext:jersey-bean-validation | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.ext:jersey-entity-filtering | Import Tool (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.ext:jersey-metainf-services | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.media:jersey-media-jaxb | Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.media:jersey-media-json-jackson | Import Tool (2.25.1) | CDDL v1.1 |
| org.glassfish.jersey.media:jersey-media-multipart | Import Tool (2.25.1), Service Layer (2.25.1) | CDDL v1.1 |
| org.glassfish:javax.el | Import Tool (3.0.1-b08) | CDDL v1.1 |
| org.glassfish:javax.el | Service Layer (3.0.0) | CDDL v1.1 |
| org.glassfish:javax.json | Service Layer (1.0.4) | CDDL v1.1 |
| org.hamcrest:hamcrest-core | Service Layer (1.3) | New BSD License |
| org.hibernate:hibernate-validator | Import Tool (5.4.1.Final), Service Layer (5.4.2.Final) | Apache License v2.0 |
| org.javassist:javassist | Import Tool (3.20.0-GA), Service Layer (3.22.0-GA) | LGPL 2.1 |
| org.jboss.logging:jboss-logging | Import Tool (3.3.0.Final), Service Layer (3.3.0.Final) | CC0 v1.0 |
| org.jdbi:jdbi | Service Layer (2.78) | Apache License v2.0 |
| org.jsoup:jsoup | Service Layer (1.10.2) | MIT License |
| org.jvnet.mimepull:mimepull | Import Tool (1.9.6), Service Layer (1.9.6) | CDDL v1.1 |
| org.mariadb.jdbc:mariadb-java-client | Engine Integration (2.2.3), Service Layer (2.2.3) | LGPL v2.1 |
| org.opensaml:opensaml-core | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-messaging-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-messaging-impl | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-profile-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-profile-impl | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-saml-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-saml-impl | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-security-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-security-impl | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-soap-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-soap-impl | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-storage-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-xmlsec-api | Service Layer (3.4.0) | Apache License v2.0 |
| org.opensaml:opensaml-xmlsec-impl | Service Layer (3.4.0) | Apache License v2.0 |
| org.owasp.encoder:encoder | Engine Integration (1.2) | The BSD 3-Clause License |
| org.owasp:dependency-check-core | Service Layer (2.1.1) | Apache License v2.0 |
| org.owasp:dependency-check-gradle | Service Layer (2.1.1) | Apache License v2.0 |
| org.owasp:dependency-check-utils | Service Layer (2.1.1) | Apache License v2.0 |
| org.pac4j.jax-rs:core | Service Layer (3.0.0) | Apache License v2.0 |
| org.pac4j:dropwizard-pac4j | Service Layer (3.0.0) | Apache License v2.0 |
| org.pac4j:j2e-pac4j | Service Layer (4.0.0) | Apache License v2.0 |
| org.pac4j:jersey225-pac4j | Service Layer (3.0.0) | Apache License v2.0 |
| org.pac4j:pac4j-config | Service Layer (3.0.0) | Apache License v2.0 |
| org.pac4j:pac4j-core | Service Layer (3.3.0) | Apache License v2.0 |
| org.pac4j:pac4j-saml | Service Layer (3.3.0) | Apache License v2.0 |
| org.projectlombok:lombok | Service Layer (1.16.8) | MIT License |
| org.simplejavamail:simple-java-mail | Service Layer (4.4.5) | Apache License v2.0 |
| org.slf4j:jcl-over-slf4j | Service Layer (1.7.25) | MIT License |
| org.slf4j:jul-to-slf4j | Service Layer (1.7.25) | MIT License |
| org.slf4j:log4j-over-slf4j | Service Layer (1.7.25) | Apache License v2.0 |
| org.slf4j:slf4j-api | Engine Integration (1.7.25), Engine Integration (1.7.6), Service Layer (1.7.25) | MIT License |
| org.springframework:spring-core | Service Layer (5.0.2.RELEASE) | Apache License v2.0 |
| org.springframework:spring-jcl | Service Layer (5.0.2.RELEASE) | Apache License v2.0 |
| org.w3c.css:sac | Service Layer (1.3) | The W3C Software License |
| org.yaml:snakeyaml | Import Tool (1.17), Service Layer (1.18) | Apache License v2.0 |
| xalan:serializer | Service Layer (2.7.2) | Apache License v2.0 |
| xalan:xalan | Service Layer (2.7.2) | Apache License v2.0 |
| xml-apis:xml-apis | Service Layer (1.3.04) | Apache License v2.0 |