I did FOSSA of Logstash 6.6.1 and Logstash-codec-plugin, both these software are under Apache 2.0 License. However both contains sub-components that are GPL, LGPL copyleft license.
Fossa scanning reveals Logstash contains dependencies that are copyleft license:
What type of dependencies Logstash has on above components
How is Logstash offered under Apache 2.0 license, when it contains above sub components that has copyleft license - GPL, LGPL.
Are these dependencies ‘part of the program’ or ‘separate program’?
Are these dependencies shipped along with logstash binary? Are these build time or runtime dependencies?