From d572d44177d6e6ef14b99fb5a97e4994a27f4612 Mon Sep 17 00:00:00 2001
From: shenwei41 <shenwei41@huawei.com>
Date: Wed, 19 Oct 2022 16:21:04 +0800
Subject: [PATCH] add info on software about MD

---
 .../Third_Party_Open_Source_Software_List.yaml     | 190 ++++++++++++---------
 1 file changed, 109 insertions(+), 81 deletions(-)

diff --git a/security/config/Third_Party_Open_Source_Software_List.yaml b/security/config/Third_Party_Open_Source_Software_List.yaml
index b078e45..0a765ad 100644
--- a/security/config/Third_Party_Open_Source_Software_List.yaml
+++ b/security/config/Third_Party_Open_Source_Software_List.yaml
@@ -11,15 +11,17 @@ mindspore:
         cpeName: flatbuffers
         version: 1.11.0
         url: https://google.github.io/flatbuffers/
-        handler: shenwei41
+        handler:
     gensim:
         cpeName: gensim
         version: 3.8.1
         url: http://radimrehurek.com/gensim
-        handler: shenwei41
+        handler:
     sentencepiece:
         cpeName: sentencepiece
         version: v0.1.92
+        language: C++
+        license: Apache License V2.0
         url: https://github.com/google/sentencepiece
         handler: shenwei41
     Eigen:
@@ -31,7 +33,7 @@ mindspore:
         cpeName: ProjectQ
         version: 0.5.1
         url: https://projectq.ch/
-        handler: shenwei41
+        handler:
     google/glog:
         cpeName: google/glog
         version: 0.4.0
@@ -46,7 +48,7 @@ mindspore:
         cpeName: opencv-python
         version: 4.1.2.30
         url: https://github.com/skvark/opencv-python
-        handler: shenwei41
+        handler:
     Scipy:
         cpeName: Scipy
         version: 1.5.4
@@ -76,16 +78,20 @@ mindspore:
         cpeName: Cython
         version: 0.29.15
         url: http://cython.org/
-        handler: shenwei41
+        handler:
     Pillow:
         cpeName: Pillow
         version: 8.2.0
+        language: Python
+        license: Historical Permission Notice and Disclaimer
         url: https://python-pillow.org
         handler: shenwei41
     abseil-cpp:
         cpeName: abseil-cpp
         version: 20210324.2
-        url: https://github.com/abseil/abseil-cpp/@https://abseil.io
+        language: C++
+        license: Apache License V2.0
+        url: https://github.com/abseil/abseil-cpp
         handler: shenwei41
     mkl-dnn:
         cpeName: mkl-dnn
@@ -96,7 +102,7 @@ mindspore:
         cpeName: JSON for Modern C++
         version: 3.6.1
         url: https://github.com/nlohmann/json
-        handler: shenwei41
+        handler:
     dataclasses:
         cpeName: dataclasses
         version: '0.7'
@@ -111,22 +117,26 @@ mindspore:
         cpeName: SymPy
         version: '1.4'
         url: http://www.sympy.org/en/index.html
-        handler: shenwei41
+        handler:
     pybind11:
         cpeName: pybind11
         version: 2.6.1
-        url: https://pybind11.readthedocs.io/en/latest/
+        language: C++
+        license: BSD 3-Clause License
+        url: https://github.com/pybind/pybind11/
         handler: shenwei41
     tinyxml2:
         cpeName: tinyxml2
         version: 8.0.0
-        url: http://www.grinninglizard.com/tinyxml2/index.html
+        language: C++
+        license: zlib/libpng License
+        url: https://github.com/leethomason/tinyxml2/
         handler: shenwei41
     QuTiP:
         cpeName: QuTiP
         version: 4.5.3
         url: http://qutip.org/
-        handler: shenwei41
+        handler:
     numpy:
         cpeName: numpy
         version: 1.17.0
@@ -136,12 +146,12 @@ mindspore:
         cpeName: matplotlib
         version: 3.2.1
         url: https://matplotlib.org
-        handler: shenwei41
+        handler:
     CMSIS:
         cpeName: CMSIS
         version: 5.7.0
         url: http://www.arm.com/zh/products/processors/cortex-m/cortex-microcontroller-software-interface-standard.php
-        handler: shenwei41
+        handler:
     asttokens:
         cpeName: asttokens
         version: 2.0.4
@@ -149,24 +159,26 @@ mindspore:
         handler: henryshi1
     icu:
         cpeName: icu
-        version: '69.1'
-        url: https://chromium.googlesource.com/chromium/deps/icu/
+        version: 69.1
+        language: C++
+        license: ICU License
+        url: https://github.com/unicode-org/icu/
         handler: shenwei41
     openmpi:
         cpeName: openmpi
         version: 4.0.3
         url: https://www.open-mpi.org/
-        handler: shenwei41
+        handler:
     libevent:
         cpeName: libevent
         version: 2.1.12
         url: https://libevent.org/
-        handler: shenwei41
+        handler:
     pyzmq:
         cpeName: pyzmq
         version: 19.0.1
         url: https://pypi.python.org/pypi/defusedxml
-        handler: shenwei41
+        handler:
     pycocotools:
         cpeName: pycocotools
         version: 2.0.1
@@ -183,12 +195,16 @@ mindspore:
     gRPC:
         cpeName: gRPC
         version: 1.36.1
-        url: https://grpc.io
+        language: C++
+        license: Apache License V2.0
+        url: https://github.com/grpc/grpc/
         handler: shenwei41
     c-ares:
         cpeName: c-ares
         version: 1.15.0
-        url: https://c-ares.haxx.se/
+        language: C++
+        license: MIT License, c-ares License
+        url: https://github.com/c-ares/c-ares/
         handler: shenwei41
     sacrebleu:
         cpeName: sacrebleu
@@ -198,11 +214,13 @@ mindspore:
         cpeName: pandas
         version: 1.0.4
         url: https://pandas.pydata.org/
-        handler: shenwei41
+        handler:
     sqlite:
         cpeName: sqlite
         version: 3.36.0
-        url: http://www3.sqlite.org/index.html
+        language: C++
+        license: Public Domain
+        url: https://github.com/sqlite/sqlite/
         handler: shenwei41
     easydict:
         cpeName: easydict
@@ -211,23 +229,27 @@ mindspore:
     libjpeg-turbo:
         cpeName: libjpeg-turbo
         version: 2.0.4
-        url: https://libjpeg-turbo.org/
+        language: C++
+        license: BSD 3-Clause License
+        url: https://github.com/libjpeg-turbo/libjpeg-turbo/
         handler: shenwei41
     OpenCV:
         cpeName: OpenCV
         version: 4.5.2
-        url: http://www.opencv.org/
+        language: C++
+        license: Apache License V2.0
+        url: https://github.com/opencv/opencv/
         handler: shenwei41
     six:
         cpeName: six
         version: 1.12.0
         url: https://six.readthedocs.io/
-        handler: shenwei41
+        handler:
     Khronos Group - Vulkan:
         cpeName: Khronos Group - Vulkan
         version: 1.2.144
         url: https://www.khronos.org/vulkan/
-        handler: shenwei41
+        handler:
     OpenFermion:
         cpeName: OpenFermion
         version: 1.0.0
@@ -239,7 +261,9 @@ mindspore:
     zlib:
         cpeName: zlib
         version: 1.2.11
-        url: https://www.zlib.net/
+        language: C++
+        license: zlib/libpng License
+        url: https://github.com/madler/zlib/
         handler: shenwei41
     nccl:
         cpeName: nccl
@@ -252,7 +276,9 @@ mindspore:
     Cppjieba:
         cpeName: Cppjieba
         version: 5.0.3
-        url: https://github.com/yanyiwu/cppjieba
+        language: C++
+        license: MIT License
+        url: https://github.com/yanyiwu/cppjieba/
         handler: shenwei41
     pytest:
         cpeName: pytest
@@ -278,7 +304,9 @@ mindspore:
     re2:
         cpeName: re2
         version: 2019-12-01
-        url: https://github.com/google/re2
+        language: C++
+        license: BSD 3-Clause License
+        url: https://github.com/google/re2/
         handler: shenwei41
 akg:
     dlpack:
@@ -402,7 +430,7 @@ mindarmour:
         cpeName: Pillow
         version: 2.0.0
         url: https://python-pillow.org
-        handler: shenwei41
+        handler:
 mindinsight:
     Flask-Cors:
         cpeName: Flask-Cors
@@ -448,27 +476,27 @@ mindinsight:
         cpeName: Flask
         url: http://flask.pocoo.org/
         version: 1.1.1
-        handler: shenwei41
+        handler:
     Pillow:
         cpeName: Pillow
         url: https://python-pillow.org
         version: 7.1.2
-        handler: shenwei41
+        handler:
     PyTorch:
         cpeName: PyTorch
         url: https://pytorch.org/
         version: 1.5.0
-        handler: shenwei41
+        handler:
     SlickGrid:
         cpeName: SlickGrid
         url: http://slickgrid.net
         version: 2.4.22
-        handler: shenwei41
+        handler:
     TensorFlow:
         cpeName: TensorFlow
         url: https://www.tensorflow.org/; https://github.com/tensorflow/tensorflow
         version: 1.15.2
-        handler: shenwei41
+        handler:
     Werkzeug:
         cpeName: Werkzeug
         url: https://github.com/pallets/werkzeug
@@ -477,148 +505,148 @@ mindinsight:
         cpeName: XlsxWriter
         url: https://xlsxwriter.readthedocs.io/
         version: 1.3.2
-        handler: shenwei41
+        handler:
     axios:
         cpeName: axios
         url: https://github.com/mzabriskie/axios
         version: 0.21.4
-        handler: shenwei41
+        handler:
     core-js:
         cpeName: core-js
         url: https://github.com/zloirock/core-js
         version: 3.6.5
-        handler: shenwei41
+        handler:
     d3:
         cpeName: d3
         url: https://d3js.org
         version: 5.9.7
-        handler: shenwei41
+        handler:
     d3-graphviz:
         cpeName: d3-graphviz
         url: https://github.com/magjac/d3-graphviz
         version: 3.0.4
-        handler: shenwei41
+        handler:
     echarts:
         cpeName: echarts
         url: http://echarts.apache.org/
         version: 5.0.2
-        handler: shenwei41
+        handler:
     element-ui:
         cpeName: element-ui
         url: http://element.eleme.io
         version: 2.13.0
-        handler: shenwei41
+        handler:
     google-pasta:
         cpeName: google-pasta
         url: https://github.com/google/pasta/
         version: 0.1.8
-        handler: shenwei41
+        handler:
     grpc:
         cpeName: grpc
         url: https://github.com/grpc/grpc
         version: v1.36.1
-        handler: shenwei41
+        handler:
     gunicorn:
         cpeName: gunicorn
         url: http://gunicorn.org/
         version: 20.0.4
-        handler: shenwei41
+        handler:
     jquery:
         cpeName: jquery
         url: http://jquery.com
         version: 3.5.0
-        handler: shenwei41
+        handler:
     marshmallow:
         cpeName: marshmallow
         url: https://github.com/marshmallow-code/marshmallow
         version: 3.10.0
-        handler: shenwei41
+        handler:
     networkx:
         cpeName: networkx
         url: https://github.com/networkx/networkx
         version: 2.5
-        handler: shenwei41
+        handler:
     numpy:
         cpeName: numpy
         url: https://www.numpy.org
         version: 1.17.0
-        handler: shenwei41
+        handler:
     onnx:
         cpeName: onnx
         url: https://onnx.ai/
         version: 1.8.0
-        handler: shenwei41
+        handler:
     onnxruntime:
         cpeName: onnxruntime
         url: https://github.com/microsoft/onnxruntime
         version: 1.5.2
-        handler: shenwei41
+        handler:
     psutil:
         cpeName: psutil
         url: https://github.com/giampaolo/psutil
         version: 5.7.0
-        handler: shenwei41
+        handler:
     pybind11:
         cpeName: pybind11
         url: https://pybind11.readthedocs.io/en/latest/
         version: 2.4.3
-        handler: shenwei41
+        handler:
     pyyaml:
         cpeName: pyyaml
         url: https://pypi.org/project/PyYAML/
         version: 5.3.1
         version: 41.1.0
-        handler: shenwei41
+        handler:
     tensorflow-onnx:
         cpeName: tensorflow-onnx
         url: https://github.com/onnx/tensorflow-onnx/tree/v1.7.1
         version: 1.7.1
-        handler: shenwei41
+        handler:
     treelib:
         cpeName: treelib
         url: https://github.com/caesar0301/treelib
         version: 1.6.1
-        handler: shenwei41
+        handler:
     vue:
         cpeName: vue
         url: https://vuejs.org/
         version: 2.6.11
-        handler: shenwei41
+        handler:
     vue-cli:
         cpeName: vue-cli
         url: https://cli.vuejs.org/
         version: 4.5.7
-        handler: shenwei41
+        handler:
     vue-cli-plugin-i18n:
         cpeName: vue-cli-plugin-i18n
         url: https://github.com/kazupon/vue-cli-plugin-i18n
         version: 0.6.1
-        handler: shenwei41
+        handler:
     vue-i18n:
         cpeName: vue-i18n
         url: http://kazupon.github.io/vue-i18n/
         version: 8.15.0
-        handler: shenwei41
+        handler:
     vue-i18n-loader:
         cpeName: vue-i18n-loader
         url: https://www.patreon.com/kazupon
         version: 0.6.1
-        handler: shenwei41
+        handler:
     vue-router:
         cpeName: vue-router
         url: http://router.vuejs.org/
         version: 05836LFC
-        handler: shenwei41
+        handler:
     vuex:
         cpeName: vuex
         url: https://vuex.vuejs.org/
         version: 3.1.1
-        handler: shenwei41
+        handler:
     yapf:
         cpeName: yapf
         url: https://github.com/google/yapf
         version: 0.30.0
-        handler: shenwei41
+        handler:
 mindelec:
     pyevtk:
         cpeName: pyevtk
@@ -632,7 +660,7 @@ mindelec:
         cpeName: numpy
         version: 1.17.0
         url: https://www.numpy.org
-        handler: shenwei41
+        handler:
     matplotlib:
         cpeName: matplotlib
         version: 3.2.1
@@ -642,43 +670,43 @@ mindelec:
         cpeName: opencv-python
         version: 4.1.2.30
         url: https://github.com/skvark/opencv-python
-        handler: shenwei41
+        handler:
     easydict:
         cpeName: easydict
         version: '1.9'
         url: https://github.com/makinacorpus/easydict
-        handler: shenwei41
+        handler:
     Pillow:
         cpeName: Pillow
         version: 8.2.0
         url: https://python-pillow.org
-        handler: shenwei41
+        handler:
     Scipy:
         cpeName: Scipy
         version: 1.5.2
         url: http://scipy.org/
-        handler: shenwei41
+        handler:
 serving:
     abseil-cpp:
         cpeName: abseil-cpp
         version: 20200923.3
         url: https://github.com/abseil/abseil-cpp
-        handler: shenwei41
+        handler:
     c-ares:
         cpeName: c-ares
         version: 1.15.0
         url: https://c-ares.haxx.se/
-        handler: shenwei41
+        handler:
     Eigen:
         cpeName: Eigen
         version: 3.3.7
         url: http://eigen.tuxfamily.org/index.php?title=Main_Page
-        handler: shenwei41
+        handler:
     google/glog:
         cpeName: google/glog
         version: 0.4.0
         url: https://github.com/google/glog
-        handler: shenwei41
+        handler:
     google/protobuf:
         cpeName: google/protobuf
         version: 3.13.0
@@ -688,12 +716,12 @@ serving:
         cpeName: gRPC
         version: 1.36.1
         url: https://grpc.io
-        handler: shenwei41
+        handler:
     googletest:
         cpeName: googletest
         version: 1.8.1
         url: http://code.google.com/p/googletest/
-        handler: shenwei41
+        handler:
     JSON for Modern C++:
         cpeName: JSON for Modern C++
         version: 3.6.1
@@ -707,17 +735,17 @@ serving:
         cpeName: pybind11
         version: 2.6.1
         url: https://pybind11.readthedocs.io/en/latest/
-        handler: shenwei41
+        handler:
     re2:
         cpeName: re2
         version: 20191201
         url: https://github.com/google/re2
-        handler: shenwei41
+        handler:
     zlib:
         cpeName: zlib
         version: 1.2.11
         url: https://www.zlib.net/
-        handler: shenwei41
+        handler:
     numpy:
         cpeName: numpy
         version: 1.17.0
@@ -725,14 +753,14 @@ serving:
     psutil:
         cpeName: psutil
         url: https://github.com/giampaolo/psutil
-        handler: shenwei41
+        handler:
     grpcio:
         cpeName: grpcio
         version: 1.36.0
         url: https://grpc.io/
-        handler: shenwei41
+        handler:
     requests:
         cpeName: requests
         version: 2.22.0
         url: https://docs.python-requests.org/en/latest/
-        handler: shenwei41
+        handler: