Built With

Open-source software that ike-platform 71 depends on, links against, ships within, or invokes at runtime.

Three layers of attribution ship with each release:

  • Software Bill of Materials (CycloneDX, JSON)[1] — full transitive dependency graph with SPDX-normalized licenses and artifact hashes. Ingestible by Dependency-Track, Trivy, Snyk, GitHub’s dependency graph.
  • Licenses (SPDX)[2] — human-readable SPDX-grouped view of declared dependencies, generated from bom.json (#335).
  • This page — curated companion covering what mechanical reports can’t see (Maven Site skin, external services, fonts inside artifacts, frontend assets in rendered HTML).

Curated narrative

Components covered by the project-wide supplement at src/main/built-with/supplement.yaml. These are the components that don’t appear in bom.json because they aren’t Maven artifacts (external services, fonts inside classifier ZIPs, runtime binaries, frontend assets).

Java language and runtime

Component License Role
OpenJDK 25[3] GPL-2.0-only WITH Classpath-exception-2.0 The Java SDK and runtime targeted by IKE consumers. Build uses --enable-preview for opt-in language preview features. The Classpath Exception is what makes OpenJDK usable from non-GPL consumers without infecting their licensing.

Maven build infrastructure

Component License Role
Apache Maven core[4] Apache-2.0 Build orchestration. ike-parent is a Maven 4 (modelVersion 4.1.0) POM consumed by every project that wants IKE conventions.
Maven Site Plugin[5] Apache-2.0 Site rendering and report generation.
Maven Project Info Reports Plugin[6] Apache-2.0 Produces dependencies.html, plugins.html, dependency-info.html and the rest of the standard reports under Project Reports.
Maven Dependency Plugin[7] Apache-2.0 Used by ike-parent to unpack the site-theme, asciidoctorconfig, and font classified artifacts at build phases.
Maven Compiler / Surefire / Failsafe / Jar / Resources / Install / Deploy / Clean Plugins[8] Apache-2.0 Standard Maven lifecycle plugins, version-pinned in ike-parent pluginManagement so consumers inherit consistent versions.
Maven Source / Javadoc / GPG Plugins[8] Apache-2.0 Source jar, javadoc, and (with the BC signer) signing during release.
CycloneDX Maven Plugin[9] Apache-2.0 Generates the SBOM (bom.json + bom.xml) at package phase per ike-issues#333.
wagon-ssh-external[10] Apache-2.0 Provides the scpexe:// protocol for site:deploy to the internal mirror at ike.komet.sh. Registered as a Maven build extension (.mvn/extensions.xml). Distributed to consumer projects via the ike-build-standards scaffold (ike-issues#338).

Cryptographic signing

Component License Role
Bouncy Castle (bcprov-jdk18on, bcpg-jdk18on)[11] MIT OpenPGP signing engine activated via <signer>bc</signer> on maven-gpg-plugin. Required because the native gpg signer serializes through gpg-agent and breaks parallel reactor builds. Bouncy Castle distributes under an MIT-X11 adaptation; SPDX classifies as MIT.

Java annotation processing and bytecode

Component License Role
ASM 9.x[12] BSD-3-Clause Bytecode manipulation library. Pinned at the version compatible with the --release 25 compiler target so annotation processors on the build classpath don’t fail on newer class file versions.
Project Lombok (consumer-optional)[13] MIT Annotation processor for boilerplate reduction. ike-bom manages the version; consumers opt in.

Logging, JSON, and runtime utilities (BOM-managed)

Component License Role
SLF4J API[14] MIT Logging facade.
Logback Classic / Core[15] EPL-1.0 OR LGPL-2.1-or-later Default SLF4J implementation.
Jackson (core, databind, annotations, jsr310, yaml)[16] Apache-2.0 JSON / YAML serialization stack.
SnakeYAML[17] Apache-2.0 Underlying YAML parser used by Jackson YAML datatype.
Apache Commons Lang / Commons IO[18] Apache-2.0 Standard utility libraries surfaced through the BOM.
Guava[19] Apache-2.0 Collections and concurrency utilities, BOM-managed.

Test frameworks (BOM-managed)

Component License Role
JUnit 5 (Jupiter API, Engine, Platform)[20] EPL-2.0 Unit and integration test framework.
AssertJ Core[21] Apache-2.0 Fluent assertion library.
Mockito Core, Mockito JUnit Jupiter[22] MIT Mocking framework for unit tests.
Testcontainers[23] MIT Container-orchestrated integration tests, used by IKE projects that need PostgreSQL, Selenium, etc. BOM-managed for consumers that opt in.

AsciiDoc and Maven Site (consumed via ike-parent)

Component License Role
AsciidoctorJ[24] MIT ike-parent activates the AsciiDoc pipeline through profiles when a consumer module has src/docs/asciidoc/ or src/site/asciidoc/. The toolchain itself lives in ike-docs (see that reactor’s built-with for full detail).
AsciidoctorJ PDF / Diagram[25] MIT PDF rendering and diagram support for AsciiDoc.
JRuby[26] EPL-2.0 OR GPL-2.0-only OR LGPL-2.1-only Embedded Ruby runtime that Asciidoctor itself runs on. Pulled in transitively by AsciidoctorJ. The OR is consumer’s choice — for downstream users including IKE, EPL-2.0 is the most redistribution-friendly of the three.
Sentry Maven Skin[27] Apache-2.0 The Maven Site skin every published page uses. Provides the navigation chrome, breadcrumbs, and template structure. The IKE Forest theme overlays Sentry’s defaults via the site-theme classifier produced by ike-build-standards (#318).
Prism[28] MIT Syntax highlighter for code blocks in rendered HTML.
Font Awesome (free tier)[29] CC-BY-4.0 AND OFL-1.1 AND MIT Icon set used in rendered HTML. Different files under different licenses — icons under CC-BY-4.0; fonts under OFL-1.1; JS under MIT.

Mechanical inventory

Direct dependencies of this module, grouped by SPDX expression. Generated from bom.json at build time.

SPDX Expression Components
Apache-2.0 2
Total 2

For full per-component detail (group, artifact, version, hashes, transitive deps), see bom.json[1] or licenses.html[2].

  • site index[30]
  • ike-issues#336[31] — the issue that introduced this page (rename of the legacy "Third-Party Notices" to friendlier "Built With").
Searching...
No results.