In summary, the Services comprise: (1) supply of a three Sonatype tools: Nexus Repository, Lifecycle and Firewall, for the purpose of (a) binary repository management, (b) security vulnerability checking of 3rd party open source libraries, (c) license compliance checking of those libraries, and (d) architectural governance to manage the use of such 3rd party libraries; (2) support/maintenance contract of the tool for the duration of the license. No other tools from Sonatype are required by this proposal. In particular, Sonatype SBOM Manager is not required.