BomLensSBOM
Open-source risk report

Open-source risk report

Project: BertBaseUncased · Generated:

1. Vulnerability analysis and remediation deadlines

Recommended remediation deadlines: Critical → within 7 days, High → within 30 days. We recommend preparing a remediation plan or risk justification.
Critical 0 High 0 Medium 0 Low 0 Unknown 0

No known vulnerabilities, or no security artifact was produced.

2. License summary

Distinct licenses identified: 3 (see the NOTICE artifact for details).

License classification (copyleft strength)

Each component is also recorded in the SBOM with a bomlens:licenseClass property. An unrecognized license is left uncategorized rather than assumed permissive.

Network copyleft 0 Strong copyleft 0 Weak copyleft 1 Permissive 1 Uncategorized 1

Outbound-license conflicts

Dependencies checked against the declared outbound license. Advisory only — it surfaces combinations that need a person to look, and makes no legal determination.

Apache-2.0

Incompatible 0 Conditional 1 Unknown 1

AI model risk assessment

Per-model rationale and conditions are in the AI compliance profile artifact. This assessment is guidance, not legal advice.

No restriction signals 0 Conditional use 0 Caution 0 Needs review 1

3. Next steps

  1. Prepare a remediation plan or risk justification within the recommended deadlines above.
  2. Keep and distribute the notice (NOTICE) together with the SBOM.