Anonymous parties to case are sufficiently de minimis for diversity purposes, so there's jurisdiction.
Actively supported software license is, under state "predominant thrust" test, a contract for services, rather than goods, making the UCC inapplicable.
State tort claims are time-barred, as the plaintiff had knowledge of the harm during the continuing contract.
http://media.ca7.uscourts.gov/cgi-bin/rssExec.pl?Submit=Display&Path=Y2018/D06-20/C:17-1276:J:Sykes:aut:T:fnOp:N:2173943:S:0
Since 2011. An occasional commonplacing of the U.S. Circuit Courts of Appeal.
Neither an authoritative statement of the law nor legal advice. Quick work.