license_finder 6.8.2 → 6.12.0

data/lib/license_finder/package_managers/npm.rb

@@ -14,7 +14,7 @@ module LicenseFinder
     end
 
     def prepare_command
-      'npm install --no-save'
+      'npm install --no-save --ignore-scripts'
     end
 
     def possible_package_paths

data/lib/license_finder/package_managers/trash.rb

@@ -30,9 +30,14 @@ module LicenseFinder
         GoPackage.from_dependency({
                                     'ImportPath' => import_path,
                                     'InstallPath' => license_path,
-                                    'Rev' => package_hash.fetch('version')
+                                    'Rev' => package_hash.fetch('version'),
+                                    'Homepage' => repo_name(import_path)
                                   }, nil, true)
       end
     end
+
+    def repo_name(name)
+      name.split('/')[0..2].join('/')
+    end
   end
 end

data/lib/license_finder/package_managers/yarn.rb

@@ -56,7 +56,7 @@ module LicenseFinder
     end
 
     def prepare_command
-      'yarn install --ignore-engines'
+      'yarn install --ignore-engines --ignore-scripts'
     end
 
     private

data/lib/license_finder/packages/conda_package.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+module LicenseFinder
+  class CondaPackage < Package
+    attr_accessor :identifier, :json
+
+    def initialize(conda_json)
+      @json = conda_json
+      @identifier = Identifier.from_hash(conda_json)
+      super(@identifier.name,
+            @identifier.version,
+            spec_licenses: Package.license_names_from_standard_spec(conda_json),
+            children: children)
+    end
+
+    def ==(other)
+      other.is_a?(CondaPackage) && @identifier == other.identifier
+    end
+
+    def to_s
+      @identifier.to_s
+    end
+
+    def package_manager
+      'Conda'
+    end
+
+    def package_url
+      @json['url']
+    end
+
+    def children
+      @json.fetch('depends', []).map { |constraint| constraint.split.first }
+    end
+
+    class Identifier
+      attr_accessor :name, :version
+
+      def initialize(name, version)
+        @name = name
+        @version = version
+      end
+
+      def self.from_hash(hash)
+        name = hash['name']
+        version = hash['version']
+        return nil if name.nil? || version.nil?
+
+        Identifier.new(name, version)
+      end
+
+      def ==(other)
+        other.is_a?(Identifier) && @name == other.name && @version == other.version
+      end
+
+      def eql?(other)
+        self == other
+      end
+
+      def hash
+        [@name, @version].hash
+      end
+
+      def <=>(other)
+        sort_name = @name <=> other.name
+        sort_name.zero? ? @version <=> other.version : sort_name
+      end
+
+      def to_s
+        "#{@name} - #{@version}"
+      end
+    end
+  end
+end

data/lib/license_finder/report.rb

@@ -30,3 +30,4 @@ require 'license_finder/reports/html_report'
 require 'license_finder/reports/markdown_report'
 require 'license_finder/reports/xml_report'
 require 'license_finder/reports/json_report'
+require 'license_finder/reports/junit_report'

data/lib/license_finder/reports/junit_report.rb

@@ -0,0 +1,19 @@
+require 'license_finder/reports/erb_report'
+
+module LicenseFinder
+  class JunitReport < ErbReport
+    ROOT_PATH = Pathname.new(__FILE__).dirname
+    TEMPLATE_PATH = ROOT_PATH.join('templates')
+
+    def to_s(filename = TEMPLATE_PATH.join("#{template_name}.erb"))
+      template = ERB.new(filename.read, nil, '-')
+      template.result(binding)
+    end
+
+    private
+
+    def template_name
+      'junit_report'
+    end
+  end
+end

data/lib/license_finder/reports/templates/junit_report.erb

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<testsuites failures="<%= unapproved_dependencies.size %>" name="<%= project_name %>" tests="<%= dependencies.size %>">
+<% sorted_dependencies.each_with_index do |dependency, i| -%>
+  <testsuite failures="<%= dependency.approved? ? "0" : "1" -%>" id="<%= i %>" name="<%= dependency.name %>" package="Gemfile.lock" skipped="0" tests="1" timestamp="<%= Time.now.strftime("%Y-%m-%dT%H:%M:%S:%6N") %>">
+    <testcase classname="<%= license_names(dependency) %>" name="<%= dependency.name %>"<%= dependency.approved? ? " /" : "" %>>
+    <%- unless dependency.approved? -%>
+      <failure message="Unapproved license in '<%= dependency.name %>' <%= dependency.version %>">
+Name: <%= dependency.name %>
+Version: <%= dependency.version %>
+Licence:
+<%- if dependency.licenses.any? -%>
+<%- dependency.licenses.each do |license| -%>- <%=license.name %>: <%=license.url %><% end %>
+<%- end -%>
+URL: <%= dependency.package_url %>
+Homepage: <%= dependency.homepage %>
+Summary: <%= REXML::Text.new(dependency.summary, false, nil, false) %>
+Description: <%= REXML::Text.new(dependency.description, false, nil, false) %>
+<% if dependency.parents.any? %>
+Dependencies:
+<% dependency.parents.to_a.each do |dep| -%>
+- <%= dep %>
+<% end -%>
+<% end -%>
+<%- if dependency.children.any? -%>
+Requirements:
+<%- dependency.children.each do |req| -%>
+- <%= req %>
+<% end -%>
+<% end -%>
+      </failure>
+      <system-out>
+stdout
+      </system-out>
+      <system-err>
+stderr
+      </system-err>
+    </testcase>
+  <%- end -%>
+  </testsuite>
+<% end -%>
+</testsuites>

data/lib/license_finder/scanner.rb

@@ -4,7 +4,8 @@ module LicenseFinder
   class Scanner
     PACKAGE_MANAGERS = [
       GoModules, GoDep, GoWorkspace, Go15VendorExperiment, Glide, Gvt, Govendor, Trash, Dep, Bundler, NPM, Pip,
-      Yarn, Bower, Maven, Gradle, CocoaPods, Rebar, Erlangmk, Nuget, Carthage, Mix, Conan, Sbt, Cargo, Dotnet, Composer, Pipenv
+      Yarn, Bower, Maven, Gradle, CocoaPods, Rebar, Erlangmk, Nuget, Carthage, Mix, Conan, Sbt, Cargo, Dotnet, Composer, Pipenv,
+      Conda
     ].freeze
 
     class << self
@@ -12,6 +13,10 @@ module LicenseFinder
         paths.reject { |path| subproject?(Pathname(path)) }
       end
 
+      def supported_package_manager_ids
+        PACKAGE_MANAGERS.map(&:id)
+      end
+
       private
 
       def subproject?(path)
@@ -28,6 +33,7 @@ module LicenseFinder
       @config = config
       @project_path = @config[:project_path]
       @logger = @config[:logger]
+      @enabled_package_manager_ids = @config[:enabled_package_manager_ids]
     end
 
     def active_packages
@@ -40,7 +46,7 @@ module LicenseFinder
       return @package_managers if @package_managers
 
       active_pm_classes = []
-      PACKAGE_MANAGERS.each do |pm_class|
+      enabled_package_managers.each do |pm_class|
         active = pm_class.new(@config).active?
 
         if active
@@ -56,5 +62,22 @@ module LicenseFinder
       active_pm_classes -= active_pm_classes.map(&:takes_priority_over)
       @package_managers = active_pm_classes.map { |pm_class| pm_class.new(@config) }
     end
+
+    private
+
+    def enabled_package_managers
+      enabled_pm_ids = @enabled_package_manager_ids
+
+      return PACKAGE_MANAGERS unless enabled_pm_ids
+
+      enabled_pm_classes = PACKAGE_MANAGERS.select { |pm_class| enabled_pm_ids.include?(pm_class.id) }
+
+      if enabled_pm_classes.length != enabled_pm_ids.length
+        unsupported_pm_ids = enabled_pm_ids - self.class.supported_package_manager_ids
+        raise "Unsupported package manager: #{unsupported_pm_ids.join(', ')}"
+      end
+
+      enabled_pm_classes
+    end
   end
 end

data/license_finder.gemspec

@@ -46,7 +46,7 @@ Gem::Specification.new do |s|
   s.add_dependency 'bundler'
   s.add_dependency 'rubyzip', '>=1', '<3'
   s.add_dependency 'thor', '~> 1.0.1'
-  s.add_dependency 'tomlrb', '~> 1.3.0'
+  s.add_dependency 'tomlrb', '>= 1.3', '< 2.1'
   s.add_dependency 'with_env', '1.1.0'
   s.add_dependency 'xml-simple', '~> 1.1.5'
 
@@ -55,7 +55,7 @@ Gem::Specification.new do |s|
   s.add_development_dependency 'cocoapods', '>= 1.0.0' if RUBY_PLATFORM =~ /darwin/
   s.add_development_dependency 'fakefs', '~> 1.2.0'
   s.add_development_dependency 'mime-types', '3.3.1'
-  s.add_development_dependency 'pry', '~> 0.13.0'
+  s.add_development_dependency 'pry', '~> 0.14.0'
   s.add_development_dependency 'rake', '~> 13.0.1'
   s.add_development_dependency 'rspec', '~> 3'
   s.add_development_dependency 'rspec-its', '~> 1.3.0'
@@ -63,6 +63,7 @@ Gem::Specification.new do |s|
   s.add_development_dependency 'rubocop-performance', '~> 1.5.0'
   s.add_development_dependency 'webmock', '~> 3.5'
 
+  s.add_development_dependency 'nokogiri', '~>1.10'
   s.add_development_dependency 'rack', '~> 2.2.2'
   s.add_development_dependency 'rack-test', '~> 1.1.0', '> 0.7'
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: license_finder
 version: !ruby/object:Gem::Version
-  version: 6.8.2
+  version: 6.12.0
 platform: ruby
 authors:
 - Ryan Collins
@@ -27,7 +27,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-08 00:00:00.000000000 Z
+date: 2021-03-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -81,16 +81,22 @@ dependencies:
   name: tomlrb
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: '1.3'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: '1.3'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.1'
 - !ruby/object:Gem::Dependency
   name: with_env
   requirement: !ruby/object:Gem::Requirement
@@ -181,14 +187,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.13.0
+        version: 0.14.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.13.0
+        version: 0.14.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -273,6 +279,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.5'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.10'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.10'
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
@@ -351,6 +371,10 @@ files:
 - ci/tasks/run-tests.yml
 - ci/tasks/update-changelog.yml
 - dlf
+- examples/Gemfile
+- examples/custom_erb_template.rb
+- examples/extract_license_data.rb
+- examples/sample_template.erb
 - lib/license_finder.rb
 - lib/license_finder/cli.rb
 - lib/license_finder/cli/approvals.rb
@@ -413,6 +437,7 @@ files:
 - lib/license_finder/package_managers/cocoa_pods.rb
 - lib/license_finder/package_managers/composer.rb
 - lib/license_finder/package_managers/conan.rb
+- lib/license_finder/package_managers/conda.rb
 - lib/license_finder/package_managers/dep.rb
 - lib/license_finder/package_managers/dotnet.rb
 - lib/license_finder/package_managers/erlangmk.rb
@@ -451,6 +476,7 @@ files:
 - lib/license_finder/packages/cocoa_pods_package.rb
 - lib/license_finder/packages/composer_package.rb
 - lib/license_finder/packages/conan_package.rb
+- lib/license_finder/packages/conda_package.rb
 - lib/license_finder/packages/erlangmk_package.rb
 - lib/license_finder/packages/go_package.rb
 - lib/license_finder/packages/gradle_package.rb
@@ -472,10 +498,12 @@ files:
 - lib/license_finder/reports/erb_report.rb
 - lib/license_finder/reports/html_report.rb
 - lib/license_finder/reports/json_report.rb
+- lib/license_finder/reports/junit_report.rb
 - lib/license_finder/reports/markdown_report.rb
 - lib/license_finder/reports/merged_report.rb
 - lib/license_finder/reports/templates/bootstrap.css
 - lib/license_finder/reports/templates/html_report.erb
+- lib/license_finder/reports/templates/junit_report.erb
 - lib/license_finder/reports/templates/markdown_report.erb
 - lib/license_finder/reports/templates/xml_report.erb
 - lib/license_finder/reports/text_report.rb
@@ -505,7 +533,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.13
 signing_key: 
 specification_version: 4
 summary: Audit the OSS licenses of your application's dependencies.