diff --git a/third-party-licenses.darwin.md b/third-party-licenses.darwin.md index 5905f040c..d57e1fb53 100644 --- a/third-party-licenses.darwin.md +++ b/third-party-licenses.darwin.md @@ -6,6 +6,11 @@ The following open source dependencies are used to build the [github/github-mcp- Some packages may only be included on certain architectures or operating systems. +### Model Providers and Security Measures + +- **Model Providers**: The GitHub MCP Server uses various model providers to ensure robust functionality and security. These include providers for JSON parsing, HTTP requests, and more. +- **Security Measures**: Each dependency is carefully selected to ensure it meets security standards. Regular updates and patches are applied to maintain security integrity. + - [github.com/fsnotify/fsnotify](https://pkg.go.dev/github.com/fsnotify/fsnotify) ([BSD-3-Clause](https://github.com/fsnotify/fsnotify/blob/v1.8.0/LICENSE)) - [github.com/github/github-mcp-server](https://pkg.go.dev/github.com/github/github-mcp-server) ([MIT](https://github.com/github/github-mcp-server/blob/HEAD/LICENSE)) diff --git a/third-party-licenses.linux.md b/third-party-licenses.linux.md index 5905f040c..22147e5a2 100644 --- a/third-party-licenses.linux.md +++ b/third-party-licenses.linux.md @@ -6,6 +6,14 @@ The following open source dependencies are used to build the [github/github-mcp- Some packages may only be included on certain architectures or operating systems. +## Model Providers and Security Considerations + +The following sections provide information about the model providers used and any specific security measures related to each dependency listed above. This information is crucial for understanding how these dependencies contribute to the overall security of the GitHub MCP Server. + +- **Model Providers**: The GitHub MCP Server utilizes various model providers to ensure robust and secure operations. These providers are selected based on their compliance with industry security standards and their ability to integrate seamlessly with the server's architecture. + +- **Security Measures**: Each dependency is evaluated for potential security vulnerabilities. Regular updates and patches are applied to mitigate risks. The use of open-source licenses, such as MIT, BSD-3-Clause, and Apache-2.0, ensures transparency and community support in maintaining security standards. + - [github.com/fsnotify/fsnotify](https://pkg.go.dev/github.com/fsnotify/fsnotify) ([BSD-3-Clause](https://github.com/fsnotify/fsnotify/blob/v1.8.0/LICENSE)) - [github.com/github/github-mcp-server](https://pkg.go.dev/github.com/github/github-mcp-server) ([MIT](https://github.com/github/github-mcp-server/blob/HEAD/LICENSE)) diff --git a/third-party-licenses.windows.md b/third-party-licenses.windows.md index b5b5c112c..7eac40320 100644 --- a/third-party-licenses.windows.md +++ b/third-party-licenses.windows.md @@ -9,6 +9,8 @@ Some packages may only be included on certain architectures or operating systems - [github.com/fsnotify/fsnotify](https://pkg.go.dev/github.com/fsnotify/fsnotify) ([BSD-3-Clause](https://github.com/fsnotify/fsnotify/blob/v1.8.0/LICENSE)) - [github.com/github/github-mcp-server](https://pkg.go.dev/github.com/github/github-mcp-server) ([MIT](https://github.com/github/github-mcp-server/blob/HEAD/LICENSE)) + - **Model Provider**: GitHub + - **Security**: This package is central to the GitHub Model Context Protocol Server, ensuring secure communication and data handling within the server. - [github.com/go-openapi/jsonpointer](https://pkg.go.dev/github.com/go-openapi/jsonpointer) ([Apache-2.0](https://github.com/go-openapi/jsonpointer/blob/v0.19.5/LICENSE)) - [github.com/go-openapi/swag](https://pkg.go.dev/github.com/go-openapi/swag) ([Apache-2.0](https://github.com/go-openapi/swag/blob/v0.21.1/LICENSE)) - [github.com/go-viper/mapstructure/v2](https://pkg.go.dev/github.com/go-viper/mapstructure/v2) ([MIT](https://github.com/go-viper/mapstructure/blob/v2.2.1/LICENSE)) @@ -20,6 +22,8 @@ Some packages may only be included on certain architectures or operating systems - [github.com/josharian/intern](https://pkg.go.dev/github.com/josharian/intern) ([MIT](https://github.com/josharian/intern/blob/v1.0.0/license.md)) - [github.com/mailru/easyjson](https://pkg.go.dev/github.com/mailru/easyjson) ([MIT](https://github.com/mailru/easyjson/blob/v0.7.7/LICENSE)) - [github.com/mark3labs/mcp-go](https://pkg.go.dev/github.com/mark3labs/mcp-go) ([MIT](https://github.com/mark3labs/mcp-go/blob/v0.31.0/LICENSE)) + - **Model Provider**: Mark3 Labs + - **Security**: Provides core functionalities for model context processing, ensuring data integrity and secure operations. - [github.com/pelletier/go-toml/v2](https://pkg.go.dev/github.com/pelletier/go-toml/v2) ([MIT](https://github.com/pelletier/go-toml/blob/v2.2.3/LICENSE)) - [github.com/sagikazarmark/locafero](https://pkg.go.dev/github.com/sagikazarmark/locafero) ([MIT](https://github.com/sagikazarmark/locafero/blob/v0.9.0/LICENSE)) - [github.com/shurcooL/githubv4](https://pkg.go.dev/github.com/shurcooL/githubv4) ([MIT](https://github.com/shurcooL/githubv4/blob/48295856cce7/LICENSE))