Built With
Open-source software that ike-platform 71 depends on, links against, ships within, or invokes at runtime.
Three layers of attribution ship with each release:
- Software Bill of Materials (CycloneDX, JSON)[1] — full transitive dependency graph with SPDX-normalized licenses and artifact hashes. Ingestible by Dependency-Track, Trivy, Snyk, GitHub’s dependency graph.
- Licenses (SPDX)[2] — human-readable SPDX-grouped view of declared dependencies, generated from
bom.json (#335).
- This page — curated companion covering what mechanical reports can’t see (Maven Site skin, external services, fonts inside artifacts, frontend assets in rendered HTML).
Curated narrative
Components covered by the project-wide supplement at src/main/built-with/supplement.yaml. These are the components that don’t appear in bom.json because they aren’t Maven artifacts (external services, fonts inside classifier ZIPs, runtime binaries, frontend assets).
Java language and runtime
| Component |
License |
Role |
| OpenJDK 25[3] |
GPL-2.0-only WITH Classpath-exception-2.0 |
The Java SDK and runtime targeted by IKE consumers. Build uses --enable-preview for opt-in language preview features. The Classpath Exception is what makes OpenJDK usable from non-GPL consumers without infecting their licensing. |
Maven build infrastructure
| Component |
License |
Role |
| Apache Maven core[4] |
Apache-2.0 |
Build orchestration. ike-parent is a Maven 4 (modelVersion 4.1.0) POM consumed by every project that wants IKE conventions. |
| Maven Site Plugin[5] |
Apache-2.0 |
Site rendering and report generation. |
| Maven Project Info Reports Plugin[6] |
Apache-2.0 |
Produces dependencies.html, plugins.html, dependency-info.html and the rest of the standard reports under Project Reports. |
| Maven Dependency Plugin[7] |
Apache-2.0 |
Used by ike-parent to unpack the site-theme, asciidoctorconfig, and font classified artifacts at build phases. |
| Maven Compiler / Surefire / Failsafe / Jar / Resources / Install / Deploy / Clean Plugins[8] |
Apache-2.0 |
Standard Maven lifecycle plugins, version-pinned in ike-parent pluginManagement so consumers inherit consistent versions. |
| Maven Source / Javadoc / GPG Plugins[8] |
Apache-2.0 |
Source jar, javadoc, and (with the BC signer) signing during release. |
| CycloneDX Maven Plugin[9] |
Apache-2.0 |
Generates the SBOM (bom.json + bom.xml) at package phase per ike-issues#333. |
| wagon-ssh-external[10] |
Apache-2.0 |
Provides the scpexe:// protocol for site:deploy to the internal mirror at ike.komet.sh. Registered as a Maven build extension (.mvn/extensions.xml). Distributed to consumer projects via the ike-build-standards scaffold (ike-issues#338). |
Cryptographic signing
| Component |
License |
Role |
| Bouncy Castle (bcprov-jdk18on, bcpg-jdk18on)[11] |
MIT |
OpenPGP signing engine activated via <signer>bc</signer> on maven-gpg-plugin. Required because the native gpg signer serializes through gpg-agent and breaks parallel reactor builds. Bouncy Castle distributes under an MIT-X11 adaptation; SPDX classifies as MIT. |
Java annotation processing and bytecode
| Component |
License |
Role |
| ASM 9.x[12] |
BSD-3-Clause |
Bytecode manipulation library. Pinned at the version compatible with the --release 25 compiler target so annotation processors on the build classpath don’t fail on newer class file versions. |
| Project Lombok (consumer-optional)[13] |
MIT |
Annotation processor for boilerplate reduction. ike-bom manages the version; consumers opt in. |
AsciiDoc and Maven Site (consumed via ike-parent)
| Component |
License |
Role |
| AsciidoctorJ[24] |
MIT |
ike-parent activates the AsciiDoc pipeline through profiles when a consumer module has src/docs/asciidoc/ or src/site/asciidoc/. The toolchain itself lives in ike-docs (see that reactor’s built-with for full detail). |
| AsciidoctorJ PDF / Diagram[25] |
MIT |
PDF rendering and diagram support for AsciiDoc. |
| JRuby[26] |
EPL-2.0 OR GPL-2.0-only OR LGPL-2.1-only |
Embedded Ruby runtime that Asciidoctor itself runs on. Pulled in transitively by AsciidoctorJ. The OR is consumer’s choice — for downstream users including IKE, EPL-2.0 is the most redistribution-friendly of the three. |
| Sentry Maven Skin[27] |
Apache-2.0 |
The Maven Site skin every published page uses. Provides the navigation chrome, breadcrumbs, and template structure. The IKE Forest theme overlays Sentry’s defaults via the site-theme classifier produced by ike-build-standards (#318). |
| Prism[28] |
MIT |
Syntax highlighter for code blocks in rendered HTML. |
| Font Awesome (free tier)[29] |
CC-BY-4.0 AND OFL-1.1 AND MIT |
Icon set used in rendered HTML. Different files under different licenses — icons under CC-BY-4.0; fonts under OFL-1.1; JS under MIT. |
Mechanical inventory
Direct dependencies of this module, grouped by SPDX expression. Generated from bom.json at build time.
| SPDX Expression |
Components |
Apache-2.0 |
2 |
| Total |
2 |
For full per-component detail (group, artifact, version, hashes, transitive deps), see bom.json[1] or licenses.html[2].
- site index[30]
- ike-issues#336[31] — the issue that introduced this page (rename of the legacy "Third-Party Notices" to friendlier "Built With").