X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org B908F384A033
Authentication-Results: sourceware.org; dmarc=none (p=none dis=none)
 header.from=SystematicSw.ab.ca
Authentication-Results: sourceware.org;
 spf=none smtp.mailfrom=brian DOT inglis AT systematicsw DOT ab DOT ca
X-Authority-Analysis: v=2.3 cv=ecemg4MH c=1 sm=1 tr=0
 a=kiZT5GMN3KAWqtYcXc+/4Q==:117 a=kiZT5GMN3KAWqtYcXc+/4Q==:17
 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=gUbaYAUbAAAA:8 a=j7C1ZtXA8az7xdtkp7oA:9
 a=Rwi9xztmmMdoqCem:21 a=xBI3m73srFOY78gI:21 a=QEXdDO2ut3YA:10
 a=yipANtDfiQYA:10 a=sRI3_1zDfAgwuvI8zelB:22
Subject: Re: Country Of Origin Verification - 8944
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
References: <BY5PR09MB4993E3CBA3423BD5F6605ED3BB800 AT BY5PR09MB4993 DOT namprd09 DOT prod DOT outlook DOT com>
From: Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Autocrypt: addr=Brian DOT Inglis AT SystematicSw DOT ab DOT ca; prefer-encrypt=mutual;
 keydata=
 mDMEXopx8xYJKwYBBAHaRw8BAQdAnCK0qv/xwUCCZQoA9BHRYpstERrspfT0NkUWQVuoePa0
 LkJyaWFuIEluZ2xpcyA8QnJpYW4uSW5nbGlzQFN5c3RlbWF0aWNTdy5hYi5jYT6IlgQTFggA
 PhYhBMM5/lbU970GBS2bZB62lxu92I8YBQJeinHzAhsDBQkJZgGABQsJCAcCBhUKCQgLAgQW
 AgMBAh4BAheAAAoJEB62lxu92I8Y0ioBAI8xrggNxziAVmr+Xm6nnyjoujMqWcq3oEhlYGAO
 WacZAQDFtdDx2koSVSoOmfaOyRTbIWSf9/Cjai29060fsmdsDLg4BF6KcfMSCisGAQQBl1UB
 BQEBB0Awv8kHI2PaEgViDqzbnoe8B9KMHoBZLS92HdC7ZPh8HQMBCAeIfgQYFggAJhYhBMM5
 /lbU970GBS2bZB62lxu92I8YBQJeinHzAhsMBQkJZgGAAAoJEB62lxu92I8YZwUBAJw/74rF
 IyaSsGI7ewCdCy88Lce/kdwX7zGwid+f8NZ3AQC/ezTFFi5obXnyMxZJN464nPXiggtT9gN5
 RSyTY8X+AQ==
Organization: Systematic Software
Message-ID: <6edd8c67-2558-783b-6766-8bc684cd1f4b@SystematicSw.ab.ca>
Date: Thu, 11 Jun 2020 11:19:28 -0600
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101
 Thunderbird/68.9.0
MIME-Version: 1.0
In-Reply-To: <BY5PR09MB4993E3CBA3423BD5F6605ED3BB800@BY5PR09MB4993.namprd09.prod.outlook.com>
Content-Language: en-CA
X-CMAE-Envelope: MS4wfL9cZJqdlmou8uQxpvMc56wDY4gtFUMXITSkRupjLCpbJKqtS1GIO8GYrleAxNb1ye8gfj3CTP+dS3SRS/9zyn1eaZKHvHRixgZ2vdCqBHW+yJD8YFqj
 qjjvY+VAfNqfli+jScxdzaEoWg/swBoVpEfEnZPC2tT+DDrMXq4rnLxKM/98kkLcAsrndTXR+4nCZqz2nCTKZ7T8UEfi7W1SlCUhsf6XkS8A3yxYPUx3no0c
 368YWojk4WWkths/+j/cg4LhDXcSbZ1WIPtN6xBTUTs=
X-Spam-Status: No, score=-8.8 required=5.0 tests=BAYES_50, KAM_DMARC_STATUS,
 KAM_LAZY_DOMAIN_SECURITY, KAM_NUMSUBJECT, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H3,
 RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_NONE,
 TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <http://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <http://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Cc: "Watson, Christian M. \(GRC-V000\)\[Peerless Technologies Corp.\]"
 <christian DOT m DOT watson AT nasa DOT gov>,
        "Pesich,
 Justin M. \(GRC-LTF0\)" <justin DOT m DOT pesich AT nasa DOT gov>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>

On 2020-06-11 09:59, Watson, Christian M. (GRC-V000)[Peerless Technologies
Corp.] via Cygwin wrote:
> My name is Christian Watson and I am a Supply Chain Risk Management Coordinator at NASA Glenn Research Center  As such, I ensure that all NASA Headquarter IT purchase requests comply with Section 514 of the Consolidated Appropriations Act, 2018, Public Law 115-141 (amended), enacted February 28, 2018.  To do so, the country of origin information must be obtained from the company that develops, produces, manufactures, or assembles the product(s).  Specifically, identify the country where each of the following products were developed, manufactured, and assembled:
> 
> * Cygwin 3.1.5

[DISCLAIMER: the following is FYI - I am a volunteer with no status]

As Cygwin is a volunteer international open source *FREE* software project, not
a company, and it consists of thousands of separate packages, each maintained by
international volunteers, please submit this query to the organization to whom
you submitted the purchase request, who will have paid employees to do this
research for you, for each of the thousands of included packages.
If no one submitted a purchase request: when the software was downloaded, you
received everything to which you are entitled, plus you may read the information
available on the site with home page https://cygwin.com/, to dreive the
information you request.

> Additionally, if the country of origin is outside the United States, please provide any information you may have stating that testing is performed in the United States prior to supplying products to customers.

From CYGWIN_LICENSE:

"THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESSED OR
IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE."

See
	https://cygwin.com/licensing.html

for more disclaimers in the linked licences.

> Lastly, if available, please identify all authorized distributors of the product in question.

No distributors are authorize: everyone is authorized to distribute Cygwin
packages as long as they meet all the applicable licensing terms.

From
	https://cygwin.com/licensing.html:

"Does Cygwin have an [US]ECCN[Export Classification Control Number
([US]EAR[Export Administration Regulations])] number?

No. Cygwin source and binary are made publicly available and free of charge to
download so Cygwin is provided under [US]TSU[Technology and Software
Unrestricted (EAR license exception)]/[US]TSPA[Technology and Software Publicly
Available] exemption. As a result, Cygwin does not require an ECCN number."

There are over a hundred known monitored sites provided by organizations around
the world, and more adhoc mirror sites for distribution of the software around
the world, many publicly available at universities, or internal to large
organizations, and large companies.
You may find NASA has one or more Cygwin mirror sites: e.g.

	ftp://ftp.nas.nasa.gov/mirrors/cygwin.com/pub/cygwin/

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in IEC units and prefixes, physical quantities in SI.]
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple