@gocortexio/npmgremlinbox-sendmail-8-23 2.1.0

package/LICENCE

@@ -0,0 +1,36 @@
+SENDMAIL LICENSE
+
+The following license terms and conditions apply, unless a redistribution agreement or other license is obtained from Proofpoint, Inc., 892 Ross Street, Sunnyvale, CA, 94089, USA, or by electronic mail at sendmail-license@proofpoint.com.
+
+License Terms:
+
+Use, Modification and Redistribution (including distribution of any modified or derived work) in source and binary forms is permitted only if each of the following conditions is met:
+
+1. Redistributions qualify as "freeware" or "Open Source Software" under one of the following terms:
+
+     (a) Redistributions are made at no charge beyond the reasonable cost of materials and delivery.
+
+     (b) Redistributions are accompanied by a copy of the Source Code or by an irrevocable offer to provide a copy of the Source Code for up to three years at the cost of materials and delivery. Such redistributions must allow further use, modification, and redistribution of the Source Code under substantially the same terms as this license. For the purposes of redistribution "Source Code" means the complete compilable and linkable source code of sendmail and associated libraries and utilities in the sendmail distribution including all modifications.
+
+2. Redistributions of Source Code must retain the copyright notices as they appear in each Source Code file, these license terms, and the disclaimer/limitation of liability set forth as paragraph 6 below.
+
+3. Redistributions in binary form must reproduce the Copyright Notice, these license terms, and the disclaimer/limitation of liability set forth as paragraph 6 below, in the documentation and/or other materials provided with the distribution. For the purposes of binary distribution the "Copyright Notice" refers to the following language:
+"Copyright (c) 1998-2014 Proofpoint, Inc. All rights reserved."
+
+4. Neither the name of Proofpoint, Inc. nor the University of California nor names of their contributors may be used to endorse or promote products derived from this software without specific prior written permission. The name "sendmail" is a trademark of Proofpoint, Inc.
+
+5. All redistributions must comply with the conditions imposed by the University of California on certain embedded code, which copyright Notice and conditions for redistribution are as follows:
+
+     (a) Copyright (c) 1988, 1993 The Regents of the University of California. All rights reserved.
+
+     (b) Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+          (i) Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+          (ii) Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+          (iii) Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+6. Disclaimer/Limitation of Liability: THIS SOFTWARE IS PROVIDED BY SENDMAIL, INC. AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL SENDMAIL, INC., THE REGENTS OF THE UNIVERSITY OF CALIFORNIA OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+$Revision: 8.23 $, Last updated $Date: 2014-01-26 20:10:01 $, Document 139848.1

package/README.md

@@ -0,0 +1,37 @@
+<!-- SPDX-License-Identifier: Sendmail-8.23 -->
+<!-- SPDX-FileCopyrightText: 2025 GremlinBox Maintainer <simon@sigre.xyz> -->
+
+# @gocortexio/npmgremlinbox-sendmail-8-23
+
+This is a benign GremlinBox supply chain security simulation package. It performs no malicious action and is safe to install into a development or production build to validate detection tooling.
+
+## Purpose
+
+This package implements the SPDX licence identifier Sendmail-8.23 and embeds the full official licence text. It is intended for testing licence detection, licence-policy enforcement, and SPDX compliance checks. A scanner that inspects direct or transitive dependencies should detect this licence.
+
+## Installation
+
+    npm install @gocortexio/npmgremlinbox-sendmail-8-23
+
+## Usage
+
+```javascript
+const pkg = require('@gocortexio/npmgremlinbox-sendmail-8-23');
+
+pkg.getLicenceIdentifier();
+pkg.retrieveLicenceContent();
+pkg.getPackageMetadata();
+```
+
+## What it does and does not do
+
+- Does: return its SPDX licence identifier, the full licence text, and package metadata.
+- Does not: contact the network, collect data, or run code at install time.
+
+## Project
+
+Part of the GremlinBox supply chain security testing project: https://github.com/gocortexio/gremlinbox
+
+## Licence
+
+Sendmail-8.23. See the LICENCE file in this package.

package/index.js

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: Sendmail-8.23
+// SPDX-FileCopyrightText: 2025 GremlinBox Maintainer <simon@sigre.xyz>
+
+'use strict';
+const fs = require('fs');
+const path = require('path');
+
+const LICENCE_IDENTIFIER = 'Sendmail-8.23';
+const PACKAGE_NAME = '@gocortexio/npmgremlinbox-sendmail-8-23';
+const VERSION = '2.1.0';
+
+function getLicenceIdentifier() { return LICENCE_IDENTIFIER; }
+
+function retrieveLicenceContent() {
+    try { return fs.readFileSync(path.join(__dirname, 'LICENCE'), 'utf8'); }
+    catch (e) { return 'Error: LICENCE file not found'; }
+}
+
+function getPackageMetadata() {
+    return { package_name: PACKAGE_NAME, version: VERSION, licence: LICENCE_IDENTIFIER, spdx_licence_id: LICENCE_IDENTIFIER };
+}
+
+module.exports = { getLicenceIdentifier, retrieveLicenceContent, getPackageMetadata };

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@gocortexio/npmgremlinbox-sendmail-8-23",
+  "version": "2.1.0",
+  "description": "Sendmail Licence 8.23",
+  "main": "index.js",
+  "license": "Sendmail-8.23",
+  "author": "GremlinBox Maintainer <simon@sigre.xyz>",
+  "homepage": "https://github.com/gocortexio/gremlinbox",
+  "keywords": [
+    "security",
+    "testing",
+    "licence",
+    "spdx",
+    "supply-chain"
+  ],
+  "engines": {
+    "node": ">=14.0.0"
+  },
+  "files": [
+    "index.js",
+    "LICENCE",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gocortexio/gremlinbox"
+  }
+}