license_conflicts 0.3.0 → 0.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2776bec7584cdcbd102bd11f4f5647c9434c977c8b2fe0a6613b225215e70478
-  data.tar.gz: d020285d688068be7540e0764cdb5c1100cf0abb6a57bc8d87b92ce33dcbe0b0
+  metadata.gz: e179a472650ff8248e2ffa7ea090a8f371507491ecff5b8697b15f4c0d30c29f
+  data.tar.gz: 4ee65ac584f95860f000bd47ca8c6ede41533b3ee7813d0dd3a7d180ca1afe8b
 SHA512:
-  metadata.gz: '08eb866d06c91dd917c9e2f9eb5ee56709b95d1ba86e2785be843c962d6d534ed9dfeb9824b24b123a5c34592e7aef95c43e72ee93d16f85a2d94decfbc9eef3'
-  data.tar.gz: b4f166f1c5adeef516a2d0c2feb13ef59ffb66e1bf7bfc252669bd80ddec9a7072551eb2d00acda044603370e32df5f0b5eccc2c4613dea2faaecc8e350c7d19
+  metadata.gz: 6e54edda61e0605e88be0bb7c09fe832776513c96057412dd73b173cd0940fba8ed01a118ee23f0fd2aa98cda50880c7859deea04f5483c335e62e1510387734
+  data.tar.gz: 07d05b1f06a226d8aac10bc1f5a074dd84e17b95f982512de601323885349d5031cc6211e3d6d8aa80f1e4391ea164bc621b75c5787a6628e38c56d56504e2c0

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.3.0"
+  ".": "0.3.2"
 }

data/.rubocop.yml

@@ -11,3 +11,9 @@ Style/StringLiteralsInInterpolation:
 
 Layout/LineLength:
   Max: 120
+
+# RSpec specs use a single `describe` block per file, naturally above the default
+# line limit; the limit does not apply to them.
+Metrics/BlockLength:
+  Exclude:
+    - "spec/**/*"

data/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.3.2](https://github.com/dennisurtubia/license_conflicts/compare/license_conflicts/v0.3.1...license_conflicts/v0.3.2) (2026-09-13)
+
+
+### Bug Fixes
+
+* conflicts mapping ([afcab97](https://github.com/dennisurtubia/license_conflicts/commit/afcab97686ffaa1351054667e027a683c64b78be))
+* conflicts mapping ([4e4cd3a](https://github.com/dennisurtubia/license_conflicts/commit/4e4cd3abc017181e4d45a35cbcad376d6e359af5))
+
+## [0.3.1](https://github.com/dennisurtubia/license_conflicts/compare/license_conflicts/v0.3.0...license_conflicts/v0.3.1) (2026-03-21)
+
+
+### Bug Fixes
+
+* correct variable reference for license aggregator initialization ([8a7f382](https://github.com/dennisurtubia/license_conflicts/commit/8a7f382befb2967ac21c6cb402236dab4f9230a3))
+
 ## [0.3.0](https://github.com/dennisurtubia/license_conflicts/compare/license_conflicts/v0.2.0...license_conflicts/v0.3.0) (2026-03-21)
 
 

data/lib/license_conflicts/conflicts_map.rb

@@ -1,52 +1,26 @@
 # frozen_string_literal: true
 
-# All license names in this file use the canonical form returned by
-# LicenseFinder (dependency.licenses.first.name). Input is normalised via
-# LicenseNormalizer before any lookup, so SPDX IDs and common aliases are
-# handled transparently.
-
+# Key: declared license of the EXAMINED PROJECT.
+# Value: DEPENDENCY licenses that conflict with it, i.e. licenses that
+# CANNOT be relicensed/combined under the project's license.
+#
+# Directional semantics (Kapitsaki et al. 2017, Definition 1 and Fig. 2):
+#   conflict(project P, dependency D) <=> there is no path D -> P in the
+#   article's compatibility graph.
+#
+# Documented assumptions/limitations:
+# - Single-licensed projects only (OR/AND multi-licensing is out of scope).
+# - Flattened names treated as the exact version ("only"): "GPLv2" = GPL-2.0-only, etc.
+# - Canonical names as returned by LicenseFinder, normalized via LicenseNormalizer.
+#
+# rubocop:disable Metrics/ModuleLength -- hardcoded data map, long by nature.
 module LicenseConflicts
-  APACHE2_CONFLICTS = [
-    "MIT",
-    "New BSD",
-    "Simplified BSD",
-    "Zlib",
-    "MPL 1.1",
-    "CDDL 1.0",
-    "AGPL 1.0"
-  ].freeze
-
-  NEW_BSD_CONFLICTS = [
-    "MIT",
-    "Simplified BSD",
-    "Zlib",
-    "MPL 1.1",
-    "CDDL 1.0",
-    "AGPL 1.0"
-  ].freeze
-
-  GPL2_CONFLICTS = [
+  ALL_LICENSES = [
     "MIT",
     "Simplified BSD",
     "New BSD",
-    "Apache 2.0",
     "Zlib",
-    "AFL 3.0",
-    "MPL 1.1",
-    "MPL 2.0",
-    "CDDL 1.0",
-    "LGPL 2.1",
-    "LGPL 3.0",
-    "OSL 3.0",
-    "AGPL 1.0"
-  ].freeze
-
-  GPL3_CONFLICTS = [
-    "MIT",
-    "Simplified BSD",
-    "New BSD",
     "Apache 2.0",
-    "Zlib",
     "AFL 3.0",
     "MPL 1.1",
     "MPL 2.0",
@@ -55,114 +29,101 @@ module LicenseConflicts
     "LGPL 3.0",
     "OSL 3.0",
     "GPLv2",
-    "AGPL 1.0"
+    "GPLv3",
+    "AGPL 1.0",
+    "AGPL 3"
   ].freeze
 
-  MPL2_CONFLICTS = [
-    "MIT",
-    "Simplified BSD",
-    "New BSD",
-    "Apache 2.0",
-    "Zlib",
-    "AFL 3.0",
-    "MPL 1.1",
-    "CDDL 1.0",
-    "LGPL 3.0",
-    "OSL 3.0",
-    "AGPL 1.0"
-  ].freeze
+  CONFLICTS_MAP = {
+    # Only MIT code (and public domain) can be relicensed as MIT.
+    "MIT" => (ALL_LICENSES - ["MIT"]).freeze,
 
-  SIMPLIFIED_BSD_CONFLICTS = [
-    "MIT",
-    "Zlib",
-    "MPL 1.1",
-    "CDDL 1.0",
-    "AGPL 1.0"
-  ].freeze
+    "Simplified BSD" => (ALL_LICENSES - ["MIT", "Simplified BSD"]).freeze,
 
-  CONFLICTS_MAP = {
-    "MIT" => [
-      "Zlib",
-      "MPL 1.1",
-      "CDDL 1.0",
-      "AGPL 1.0"
-    ],
-    "Simplified BSD" => SIMPLIFIED_BSD_CONFLICTS,
-    "New BSD"        => NEW_BSD_CONFLICTS,
-    "Apache 2.0"     => APACHE2_CONFLICTS,
-    "Zlib" => [
-      "MIT",
-      "New BSD",
-      "Simplified BSD",
+    "New BSD" => (ALL_LICENSES - ["MIT", "Simplified BSD", "New BSD"]).freeze,
+
+    # No other license flows into Zlib in the article's graph.
+    "Zlib" => (ALL_LICENSES - ["Zlib"]).freeze,
+
+    # Permissive licenses (MIT, BSDs, Zlib) flow into Apache-2.0; everything else conflicts.
+    "Apache 2.0" => [
+      "AFL 3.0",
       "MPL 1.1",
+      "MPL 2.0",
       "CDDL 1.0",
-      "AGPL 1.0"
-    ],
+      "LGPL 2.1",
+      "LGPL 3.0",
+      "OSL 3.0",
+      "GPLv2",
+      "GPLv3",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
     "AFL 3.0" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
       "MPL 1.1",
       "MPL 2.0",
       "CDDL 1.0",
       "LGPL 2.1",
       "LGPL 3.0",
+      "OSL 3.0",
       "GPLv2",
       "GPLv3",
-      "AGPL 3",
-      "Zlib",
-      "AGPL 1.0"
-    ],
-    "MPL 1.1" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
-      "Zlib",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
+    # No other license flows into MPL-1.1.
+    "MPL 1.1" => (ALL_LICENSES - ["MPL 1.1"]).freeze,
+
+    # MIT/BSDs (solid edge), Zlib/Apache-2.0 and MPL-1.1 (non-transitive edges as the
+    # last edge of the path) flow into MPL-2.0. Article's py2exe case: MIT + MPL-1.1
+    # are combinable under MPL-2.0.
+    "MPL 2.0" => [
       "AFL 3.0",
+      "CDDL 1.0",
+      "LGPL 2.1",
       "LGPL 3.0",
       "OSL 3.0",
-      "AGPL 1.0"
-    ],
-    "MPL 2.0"    => MPL2_CONFLICTS,
-    "CDDL 1.0" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
+      "GPLv2",
+      "GPLv3",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
+    # Only MPL-1.1 flows into CDDL-1.0 (CDDL is derived from MPL-1.1).
+    "CDDL 1.0" => (ALL_LICENSES - ["MPL 1.1", "CDDL 1.0"]).freeze,
+
+    # Zlib and Apache-2.0 do NOT flow into LGPL-2.1 (explicit incompatibility in the
+    # article -- Shopware case). GPL cannot flow "back" into LGPL.
+    "LGPL 2.1" => [
       "Zlib",
+      "Apache 2.0",
       "AFL 3.0",
       "MPL 1.1",
-      "MPL 2.0",
-      "LGPL 2.1",
+      "CDDL 1.0",
       "LGPL 3.0",
       "OSL 3.0",
       "GPLv2",
       "GPLv3",
-      "AGPL 3",
-      "AGPL 1.0"
-    ],
-    "LGPL 2.1" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
-      "Zlib",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
+    # Apache-2.0 and Zlib flow into LGPL-3.0 (unlike LGPL-2.1).
+    "LGPL 3.0" => [
       "AFL 3.0",
       "MPL 1.1",
-      "MPL 2.0",
       "CDDL 1.0",
+      "LGPL 2.1",
       "OSL 3.0",
-      "AGPL 1.0"
-    ],
+      "GPLv2",
+      "GPLv3",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
     "OSL 3.0" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
-      "Zlib",
-      "AFL 3.0",
       "MPL 1.1",
       "MPL 2.0",
       "CDDL 1.0",
@@ -170,43 +131,49 @@ module LicenseConflicts
       "LGPL 3.0",
       "GPLv2",
       "GPLv3",
-      "AGPL 3",
-      "AGPL 1.0"
-    ],
-    "GPLv2"  => GPL2_CONFLICTS,
-    "GPLv3"  => GPL3_CONFLICTS,
-    "AGPL 3" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
+    # Apache-2.0 and Zlib are incompatible with GPL-2.0 (explicit examples in the
+    # article, Section 4.1 and Table 4). GPLv3 incompatible with GPLv2 "and vice versa".
+    "GPLv2" => [
       "Zlib",
+      "Apache 2.0",
       "AFL 3.0",
       "MPL 1.1",
-      "MPL 2.0",
       "CDDL 1.0",
-      "LGPL 2.1",
       "LGPL 3.0",
       "OSL 3.0",
-      "GPLv2",
       "GPLv3",
-      "AGPL 1.0"
-    ],
-    "AGPL 1.0" => [
-      "MIT",
-      "Simplified BSD",
-      "New BSD",
-      "Apache 2.0",
-      "Zlib",
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
+    # Apache-2.0, Zlib, MPL-2.0 and the LGPLs flow into GPL-3.0.
+    "GPLv3" => [
       "AFL 3.0",
       "MPL 1.1",
-      "MPL 2.0",
       "CDDL 1.0",
-      "LGPL 2.1",
-      "LGPL 3.0",
       "OSL 3.0",
       "GPLv2",
-      "GPLv3"
-    ]
+      "AGPL 1.0",
+      "AGPL 3"
+    ].freeze,
+
+    # Exact-only assumption: nothing flows into AGPL-1.0 (in the article's graph the
+    # node is AGPL-1.0+, with an outgoing edge only to AGPL-3.0).
+    "AGPL 1.0" => (ALL_LICENSES - ["AGPL 1.0"]).freeze,
+
+    # GPL-3.0 flows into AGPL-3.0 (GPLv3 clause 13); GPL-2.0 does not (Odoo case).
+    "AGPL 3" => [
+      "AFL 3.0",
+      "MPL 1.1",
+      "CDDL 1.0",
+      "OSL 3.0",
+      "GPLv2",
+      "AGPL 1.0"
+    ].freeze
   }.freeze
 end
+# rubocop:enable Metrics/ModuleLength

data/lib/license_conflicts/finder.rb

@@ -49,7 +49,7 @@ module LicenseConflicts
     end
 
     def finder
-      @finder ||= LicenseFinder::LicenseAggregator.new(config, nil)
+      @finder ||= LicenseFinder::LicenseAggregator.new(@config, nil)
     end
 
     def unapproved

data/lib/license_conflicts/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module LicenseConflicts
-  VERSION = "0.3.0"
+  VERSION = "0.3.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: license_conflicts
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.2
 platform: ruby
 authors:
 - Dennis Urtubia