The artifact for the ICSE'25 paper titled "ROSA: Finding Backdoors with Fuzzing" contains source
code from multiple external projects.

Here is a full list of their licenses:

* ROSA (Docker image "rosa:0.5.0"): LGPL-2.1-only (https://archive.softwareheritage.org/browse/origin/directory/?origin_url=https://github.com/binsec/rosa)
* ROSARUM (Docker image "rosarum:0.2.0"): mixed (https://archive.softwareheritage.org/browse/origin/directory/?origin_url=https://github.com/binsec/rosarum)
* dictionaries/: heavily based on examples from AFL++ (https://github.com/AFLplusplus/AFLplusplus),
  which is licensed under Apache-2.0
* preeny/: BSD-2-Clause (https://github.com/zardus/preeny)
* preloads/: based on preeny (https://github.com/zardus/preeny), which is licensed under
  BSD-2-Clause, and AFL++ (https://github.com/AFLplusplus/AFLplusplus), which is licensed under
  Apache-2.0
* seeds/: heavily based on examples from AFL++ (https://github.com/AFLplusplus/AFLplusplus),
  which is licensed under Apache-2.0

Any other files and directories are licensed under LGPL-2.1-only (see LICENSE.gpl).
