verify licenses of libraries used in the CSLT tool

[fstasi]

we need to distribute this tool as closed surce, for this reason we need to check the licenses of the libraries we used to implement the tool itself

[umbynos]

Currently, the go.mod file lists the following direct dependencies:

• www.github.com/arduino/go-paths-helper: developed by us and under GPL-2.0 License
• www.github.com/spf13/cobra: under Apache License 2.0
• www.github.com/sirupsen/logrus: under MIT License

[umbynos]

@alranel here's my discoveries

[umbynos]

with #18 go.bug.st/relaxed-semver will be added, it's a lib developed by @cmaglie and is licensed under BSD-3-Clause License

[alranel]

@umbynos Do we own 100% the codebase of go-paths-helper? Or does it contain code imported/copied/merged from other sources?
If it is 100% owned by us, its license doesn't matter and we have no blockers to release arduino-cslt as closed source

[umbynos]

Yeah we are the only contributors and the only libs we use in it are:

• www.github.com/pkg/errors (under BSD-2-Clause License)
• www.github.com/stretchr/testify (under MIT License)

[umbynos]

Closing because the licenses should not be a problem