The jboss-datagrid-7.1.1-remote-java-client/docs/licenses/licenses.html file included with ER1 has the following issues:

1. The org.jboss jboss-transaction-spi 7.3.0.SP1-redhat-1 entry says it is in the Public Domain, but it points to https://creativecommons.org/publicdomain/zero/1.0/legalcode. All of the other Public Domain links point to http://repository.jboss.org/licenses/cc0-1.0.txt. If this is the correct license for the jboss-transaction-spi, then the local license file should be updated.

2. The org.jboss.jdeparser jdeparser 1.0.0.Final-redhat-1 entry points to the "Common Development and Distribution License 1.1" using https://spdx.org/licenses/CDDL-1.1 which doesn't work. It should point to https://spdx.org/licenses/CDDL-1.1.html

3. The same entry points to http://glassfish.java.net/public/CDDL+GPL_1_1.html for the "GNU General Public License, Version 2 with Classpath Exception" license, but this link redirects to https://javaee.github.io/glassfish/. Maybe https://javaee.github.io/glassfish/LICENSE is the correct link?

4. The org.testng testng 6.8.8 entry points to http://apache.org/licenses/LICENSE-2.0 and all other Apache-licensed entries point to http://www.apache.org/licenses/LICENSE-2.0.txt instead

5. The xpp3 xpp3_min 1.1.4c entry points to http://creativecommons.org/licenses/publicdomain and the text of that page says that it isn't a license. It suggests https://creativecommons.org/choose/zero/, but I'm not sure if that is correct.

There are several entries where the online link points to the license on the website for the component, instead of the SPDX versions. https://spdx.org/licenses/ I am assuming this is intentional, even though it is inconsistent? I also think that the text in the local license file should match what is on the website, though. Here's an example:

• The org.mockito mockito-all 1.9.5 MIT License entry points to https://raw.githubusercontent.com/mockito/mockito/release/1.x/LICENSE for the MIT license.