License Scan/Remediation Questions

[austinlparker]

Hello maintainers! We have received a report from the CNCF license audit that the following paths contain licenses that do not match the project license. You can find the full report here: https://lfscanning.org/reports/cncf-2/open-telemetry-2024-02-09-e8fcbc12-0a27-470a-9f2d-c5f680322e13.html

• static-instrumenter (appears to be test artifacts/resources, so I don't believe this is a problem but if we don't need them we should remove them)

Please review the linked material and document any decisions made in this issue, thanks.

[trask]

I checked, and these files

static-instrumenter/agent-instrumenter/src/integrationTest/resources/app.jar/mozilla/public-suffix-list.txt static-instrumenter/maven-plugin/src/test/resources/test-http-app.jar/mozilla/public-suffix-list.txt

come from Apache HTTP Client, which includes a direct copy of the MPL licensed file https://publicsuffix.org/list/public_suffix_list.dat