license_finder 5.8.0 → 5.9.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (29) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +99 -84
  3. data/CONTRIBUTING.md +6 -6
  4. data/Dockerfile +20 -7
  5. data/README.md +11 -8
  6. data/Rakefile +1 -8
  7. data/VERSION +1 -1
  8. data/ci/pipelines/pull-request.yml.erb +7 -7
  9. data/ci/pipelines/release.yml.erb +4 -4
  10. data/ci/scripts/updateChangelog.sh +2 -2
  11. data/lib/license_finder/cli/dependencies.rb +3 -1
  12. data/lib/license_finder/cli/main.rb +1 -0
  13. data/lib/license_finder/decision_applier.rb +7 -0
  14. data/lib/license_finder/decisions.rb +11 -0
  15. data/lib/license_finder/license/definitions.rb +69 -6
  16. data/lib/license_finder/license/templates/Apache1_1.txt +16 -0
  17. data/lib/license_finder/license/templates/EPL1.txt +86 -0
  18. data/lib/license_finder/license/templates/LGPL2_1.txt +169 -0
  19. data/lib/license_finder/package.rb +4 -1
  20. data/lib/license_finder/package_manager.rb +1 -0
  21. data/lib/license_finder/package_managers/bundler.rb +12 -4
  22. data/lib/license_finder/package_managers/composer.rb +55 -0
  23. data/lib/license_finder/package_managers/gvt.rb +5 -22
  24. data/lib/license_finder/package_managers/npm.rb +3 -1
  25. data/lib/license_finder/packages/composer_package.rb +9 -0
  26. data/lib/license_finder/packages/npm_package.rb +6 -0
  27. data/lib/license_finder/scanner.rb +2 -1
  28. data/license_finder.gemspec +2 -2
  29. metadata +10 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: c3ddaa44514959c64554705bd86e147b70ca1067e3a0949549b18a0431204999
4
- data.tar.gz: '07853ae9c40dee27d37946ed1ae1f0a9300e440184926037a18169cab0a8d696'
3
+ metadata.gz: 87e2fb9a0a1beaf1437eff63ee1eecfbd23ecdfd019ff58f73b73f076d82b9f2
4
+ data.tar.gz: e4af0df365e10dac163c552e424234f2e36743ecd476b780dc5b89a5c1bdd05a
5
5
  SHA512:
6
- metadata.gz: 9d213c171689b5839d5ea00beced104e6e4a33346e658390005d2a6c786d5a06c3da578e2fa0edcea290b457260e90305d0129be25530efa19858fc594f38671
7
- data.tar.gz: 7f56df207a2d49adff14d8855e6ac2bf218f6934115afafd47f2066d45fe88041082052d5cf07a73dde596589a432074099d6d0336d19f4b16268f705194f4df
6
+ metadata.gz: 33c3471401b4761ad882bc68a7a0872fe00c9a0c9c06f7cba3d70bef058442784c70549bf00ca1b8307a176073d6abc137f9ae8f9032cdb680669b3857aff82c
7
+ data.tar.gz: eb5bfa7f900b7d0aa452f68b518d31eda5fe9b07a483caa0f6129cc7c75f8b8f560c2517dd28fe3025373f0df44e57f11b100f6f21ab22493e0a97426e4e95a3
data/CHANGELOG.md CHANGED
@@ -1,83 +1,97 @@
1
+ # [5.9.0] / 2019-06-10
2
+
3
+ ### Added
4
+ * composer PHP support - [c671309](https://github.com/pivotal/LicenseFinder/commit/c671309d89c54a4dfac3ac40aab1bf70e3c3f6a2)
5
+ * composer support - [13ecaab](https://github.com/pivotal/LicenseFinder/commit/13ecaab7ee55c95ca973b74950fb10c3daea0784) - Zachary Knight
6
+ * --homepage option to `dependencies add` - [b7f7ef8](https://github.com/pivotal/LicenseFinder/commit/b7f7ef8b81d193b5535cb3c48b9244ecd446057f)
7
+
8
+ ### Fixed
9
+ * 'dotnet restore' failing - [dee1045](https://github.com/pivotal/LicenseFinder/commit/dee104517e0cf8ce769405910f46607a66017f40)
10
+ * Reporting extra paths for gvt projects - [ba7d1bd](https://github.com/pivotal/LicenseFinder/commit/ba7d1bdd90282e7d127c3ddaf68b51f98b402000)
11
+
12
+ ### Changed
13
+ * Fix license definition tests - [15b524f](https://github.com/pivotal/LicenseFinder/commit/15b524fa52f63e04a82d160a7fc3d49c288d01e8)
14
+
1
15
  # [5.8.0] / 2019-05-22
2
16
 
3
17
  ### Added
4
- * Trash Package Manager - [3a3d854](https://github.com/pivotal-legacy/LicenseFinder/commit/3a3d8541c4ea64607df6b120111aff324f93778d)
18
+ * Trash Package Manager - [3a3d854](https://github.com/pivotal/LicenseFinder/commit/3a3d8541c4ea64607df6b120111aff324f93778d)
5
19
 
6
20
  ### Fixed
7
- * Prefer to use `origin` over `path` for govendor - [31c6041](https://github.com/pivotal-legacy/LicenseFinder/commit/31c6041926a27b61c35c05c6433a87d0af78c1e5)
21
+ * Prefer to use `origin` over `path` for govendor - [31c6041](https://github.com/pivotal/LicenseFinder/commit/31c6041926a27b61c35c05c6433a87d0af78c1e5)
8
22
 
9
23
  # [5.7.1] / 2019-03-08
10
24
 
11
25
  # [5.7.0] / 2019-03-01
12
26
 
13
27
  ### Added
14
- * Ruby 2.6.1 support - [8d60ed1](https://github.com/pivotal-legacy/LicenseFinder/commit/8d60ed13f99b830cc1352900f90e2b298105f518)
28
+ * Ruby 2.6.1 support - [8d60ed1](https://github.com/pivotal/LicenseFinder/commit/8d60ed13f99b830cc1352900f90e2b298105f518)
15
29
 
16
30
  ### Changed
17
- * Conan version is locked to 1.11.2 to avoid breaking changes - [72b766a](https://github.com/pivotal-legacy/LicenseFinder/commit/72b766a948be5b0f8eade75e716796f50ea9ebf3)
31
+ * Conan version is locked to 1.11.2 to avoid breaking changes - [72b766a](https://github.com/pivotal/LicenseFinder/commit/72b766a948be5b0f8eade75e716796f50ea9ebf3)
18
32
 
19
33
  # [5.6.2] / 2019-01-28
20
34
 
21
35
  # [5.6.1] / 2019-01-25
22
36
 
23
37
  ### Changed
24
- * Updated GOLANG to 1.11.4 in Docker image [#163424880] - [67e5e1f](https://github.com/pivotal-legacy/LicenseFinder/commit/67e5e1ffef19acf3a63cac55c5aa3626fb4c7491)
38
+ * Updated GOLANG to 1.11.4 in Docker image [#163424880] - [67e5e1f](https://github.com/pivotal/LicenseFinder/commit/67e5e1ffef19acf3a63cac55c5aa3626fb4c7491)
25
39
 
26
40
  # [5.6.0] / 2018-12-19
27
41
 
28
42
  ### Added
29
- * Add support for JSON reports [#161595251] - [5a1f735](https://github.com/pivotal-legacy/LicenseFinder/commit/5a1f73515c83cbf8ce17275c4c9d1af43d0db772)
30
- * Removed the removal of nested projects - [6e1941c](https://github.com/pivotal-legacy/LicenseFinder/commit/6e1941c4d06676988ff8bdad81bd83a4bb5c17e9)
31
- * Show verbose errors from prepare commands [#161462746] - [2b14299](https://github.com/pivotal-legacy/LicenseFinder/commit/2b142995d06572f772104c39437d0b64f9569f79)
43
+ * Add support for JSON reports [#161595251] - [5a1f735](https://github.com/pivotal/LicenseFinder/commit/5a1f73515c83cbf8ce17275c4c9d1af43d0db772)
44
+ * Removed the removal of nested projects - [6e1941c](https://github.com/pivotal/LicenseFinder/commit/6e1941c4d06676988ff8bdad81bd83a4bb5c17e9)
45
+ * Show verbose errors from prepare commands [#161462746] - [2b14299](https://github.com/pivotal/LicenseFinder/commit/2b142995d06572f772104c39437d0b64f9569f79)
32
46
 
33
- * Support to find gradle.kts files [#161629958] - [f7cb587](https://github.com/pivotal-legacy/LicenseFinder/commit/f7cb587787f4de282c34afe66c0a2d0c1c72a84f)
47
+ * Support to find gradle.kts files [#161629958] - [f7cb587](https://github.com/pivotal/LicenseFinder/commit/f7cb587787f4de282c34afe66c0a2d0c1c72a84f)
34
48
 
35
49
  ### Fixed
36
- * Go modules reports incorrect install paths - [9ab5aa9](https://github.com/pivotal-legacy/LicenseFinder/commit/9ab5aa9aadc9432c5359ed2af2cb32e28fac277a)
37
- Revert "* Go modules reports incorrect install paths" - [fcead98](https://github.com/pivotal-legacy/LicenseFinder/commit/fcead980ae2cc24f7193a1f38944f4df60a8c3fc)
50
+ * Go modules reports incorrect install paths - [9ab5aa9](https://github.com/pivotal/LicenseFinder/commit/9ab5aa9aadc9432c5359ed2af2cb32e28fac277a)
51
+ Revert "* Go modules reports incorrect install paths" - [fcead98](https://github.com/pivotal/LicenseFinder/commit/fcead980ae2cc24f7193a1f38944f4df60a8c3fc)
38
52
 
39
- * Fix install_paths for go mod now accurately report dependency installation directories [#161943322 finish] - [ea28c06](https://github.com/pivotal-legacy/LicenseFinder/commit/ea28c06898964043f5849b64b4043bde81a2d7cd)
40
- * Handle log file names created with whitespaces and slashes - [7d6f9da](https://github.com/pivotal-legacy/LicenseFinder/commit/7d6f9da5006e1e7bbb71f594188ab87ee76ddfbb)
53
+ * Fix install_paths for go mod now accurately report dependency installation directories [#161943322 finish] - [ea28c06](https://github.com/pivotal/LicenseFinder/commit/ea28c06898964043f5849b64b4043bde81a2d7cd)
54
+ * Handle log file names created with whitespaces and slashes - [7d6f9da](https://github.com/pivotal/LicenseFinder/commit/7d6f9da5006e1e7bbb71f594188ab87ee76ddfbb)
41
55
 
42
56
  ### Changed
43
- * Updated go-lang to 1.11.2 in the Docker - [d720f9c](https://github.com/pivotal-legacy/LicenseFinder/commit/d720f9c16f82044b5024213bec41b8e9f34cf306)
57
+ * Updated go-lang to 1.11.2 in the Docker - [d720f9c](https://github.com/pivotal/LicenseFinder/commit/d720f9c16f82044b5024213bec41b8e9f34cf306)
44
58
 
45
59
  # [5.5.2] / 2018-10-17
46
60
 
47
61
  ### Fixed
48
- * go mod prepare command being incorrect - [480c465](https://github.com/pivotal-legacy/LicenseFinder/commit/480c4654cde7342456318ed4e28b6cebd4a09e4b)
62
+ * go mod prepare command being incorrect - [480c465](https://github.com/pivotal/LicenseFinder/commit/480c4654cde7342456318ed4e28b6cebd4a09e4b)
49
63
 
50
64
  # [5.5.1] / 2018-10-16
51
65
 
52
66
  ### Added
53
- * Documentation for asterisks being added to license names [#158960018] - [154b727](https://github.com/pivotal-legacy/LicenseFinder/commit/154b7273b1c18e64afa48799b50588251f99e982)
54
- * Document the prepare option on the command line - [c283a38](https://github.com/pivotal-legacy/LicenseFinder/commit/c283a38d9e8b9feefc5afe32f1df55b357a33333)
67
+ * Documentation for asterisks being added to license names [#158960018] - [154b727](https://github.com/pivotal/LicenseFinder/commit/154b7273b1c18e64afa48799b50588251f99e982)
68
+ * Document the prepare option on the command line - [c283a38](https://github.com/pivotal/LicenseFinder/commit/c283a38d9e8b9feefc5afe32f1df55b357a33333)
55
69
 
56
70
  ### Fixed
57
- * Go modules are forced to be enabled on go mod package managers - [cf9123d](https://github.com/pivotal-legacy/LicenseFinder/commit/cf9123d654b98cdef872d3b21631e69960abe365)
71
+ * Go modules are forced to be enabled on go mod package managers - [cf9123d](https://github.com/pivotal/LicenseFinder/commit/cf9123d654b98cdef872d3b21631e69960abe365)
58
72
 
59
73
  # [5.5.0] / 2018-10-11
60
74
 
61
75
  ### Added
62
- * Go Module support - [8a20210](https://github.com/pivotal-legacy/LicenseFinder/commit/8a202109e942316434978befd33854aa985dd872)
76
+ * Go Module support - [8a20210](https://github.com/pivotal/LicenseFinder/commit/8a202109e942316434978befd33854aa985dd872)
63
77
 
64
78
  ### Changed
65
- * Lowering gemspec ruby requirement to support jruby 9.1.x - [279bd25](https://github.com/pivotal-legacy/LicenseFinder/commit/279bd25bbebbd3851dcc0062c3c47f7c7063dad8)
66
- * Bumps rubocop to 0.59.2 - [291d335](https://github.com/pivotal-legacy/LicenseFinder/commit/291d3358921dbb47bc612b77656353da07e71a2b)
79
+ * Lowering gemspec ruby requirement to support jruby 9.1.x - [279bd25](https://github.com/pivotal/LicenseFinder/commit/279bd25bbebbd3851dcc0062c3c47f7c7063dad8)
80
+ * Bumps rubocop to 0.59.2 - [291d335](https://github.com/pivotal/LicenseFinder/commit/291d3358921dbb47bc612b77656353da07e71a2b)
67
81
 
68
82
  ### Fixed
69
- * 'dlf' with no-args should get a login shell - [2b019fb](https://github.com/pivotal-legacy/LicenseFinder/commit/2b019fb1126ec2fcb9cafa092cad6d27b875e5f9) - Kim Dykeman
70
- * Do not include godep dependencies with common paths - [23e951f](https://github.com/pivotal-legacy/LicenseFinder/commit/23e951fae56a43abde52ecefa73e8a5ff73bb688)
71
- * Remove uneeded bundle install in dlf [#160758436] - [f44c73f](https://github.com/pivotal-legacy/LicenseFinder/commit/f44c73f6c06838a29ff9a75932e08fb1445557ca)
83
+ * 'dlf' with no-args should get a login shell - [2b019fb](https://github.com/pivotal/LicenseFinder/commit/2b019fb1126ec2fcb9cafa092cad6d27b875e5f9) - Kim Dykeman
84
+ * Do not include godep dependencies with common paths - [23e951f](https://github.com/pivotal/LicenseFinder/commit/23e951fae56a43abde52ecefa73e8a5ff73bb688)
85
+ * Remove uneeded bundle install in dlf [#160758436] - [f44c73f](https://github.com/pivotal/LicenseFinder/commit/f44c73f6c06838a29ff9a75932e08fb1445557ca)
72
86
 
73
- * dlf gemfile directory issues [#160758436 finish] - [2db3972](https://github.com/pivotal-legacy/LicenseFinder/commit/2db397261654bca89771e85984b4ae6819274e55)
74
- Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://github.com/pivotal-legacy/LicenseFinder/commit/6b17ddc4202518ffd167c8d38a2045a36eb00144)
87
+ * dlf gemfile directory issues [#160758436 finish] - [2db3972](https://github.com/pivotal/LicenseFinder/commit/2db397261654bca89771e85984b4ae6819274e55)
88
+ Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://github.com/pivotal/LicenseFinder/commit/6b17ddc4202518ffd167c8d38a2045a36eb00144)
75
89
 
76
90
  # [5.4.1] / 2018-09-18
77
91
 
78
92
  ### Fixed
79
- * Extra dependencies showing up for some go projects [#160438065] - [dfb1367](https://github.com/pivotal-legacy/LicenseFinder/commit/dfb136724721843c1196e74a6b4c762538af62ba)
80
- * remove workspace-aggregator as a yarn dependency [#159612717 finish] - [4e0afd0](https://github.com/pivotal-legacy/LicenseFinder/commit/4e0afd0ba79623f5bb4c055d42a76ba77ce1c785)
93
+ * Extra dependencies showing up for some go projects [#160438065] - [dfb1367](https://github.com/pivotal/LicenseFinder/commit/dfb136724721843c1196e74a6b4c762538af62ba)
94
+ * remove workspace-aggregator as a yarn dependency [#159612717 finish] - [4e0afd0](https://github.com/pivotal/LicenseFinder/commit/4e0afd0ba79623f5bb4c055d42a76ba77ce1c785)
81
95
 
82
96
  # [5.4.0] / 2018-08-20
83
97
 
@@ -91,23 +105,23 @@ Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://
91
105
  # [5.3.0] / 2018-06-05
92
106
 
93
107
  ### Added
94
- * Experimental support for Rust dependencies with Cargo - [2ef3129](https://github.com/pivotal-legacy/LicenseFinder/commit/2ef31290f7abf51db5b7173302d1e535508bbd7a)
95
- * Add project roots command to list paths to scan - [b7a22ea](https://github.com/pivotal-legacy/LicenseFinder/commit/b7a22eacfac0e1b9334998de606df69ec3156f77)
108
+ * Experimental support for Rust dependencies with Cargo - [2ef3129](https://github.com/pivotal/LicenseFinder/commit/2ef31290f7abf51db5b7173302d1e535508bbd7a)
109
+ * Add project roots command to list paths to scan - [b7a22ea](https://github.com/pivotal/LicenseFinder/commit/b7a22eacfac0e1b9334998de606df69ec3156f77)
96
110
 
97
111
  ### Removed
98
- * Remove HTTParty dependency - [c52d014](https://github.com/pivotal-legacy/LicenseFinder/commit/c52d014df1ca9cd3838d03c60daa6fad954c5579)
112
+ * Remove HTTParty dependency - [c52d014](https://github.com/pivotal/LicenseFinder/commit/c52d014df1ca9cd3838d03c60daa6fad954c5579)
99
113
 
100
114
  # [5.2.3] / 2018-05-14
101
115
 
102
116
  # [5.2.1] / 2018-05-14
103
117
 
104
118
  ### Changed
105
- * Updated go-lang to 1.10.2 in the Docker * Updated Maven to 3.5.3 in the Docker - [1decf6a](https://github.com/pivotal-legacy/LicenseFinder/commit/1decf6ad27c9edf96b4f5cccd9a7ca0955fed9f2) - Mark Fioravanti
119
+ * Updated go-lang to 1.10.2 in the Docker * Updated Maven to 3.5.3 in the Docker - [1decf6a](https://github.com/pivotal/LicenseFinder/commit/1decf6ad27c9edf96b4f5cccd9a7ca0955fed9f2) - Mark Fioravanti
106
120
 
107
121
  # [5.2.0] / 2018-05-09
108
122
 
109
123
  ### Fixed
110
- * Support for pip 10.0.1 - [286f679](https://github.com/pivotal-legacy/LicenseFinder/commit/286f6790dc71c97c0e93ecdfe0c6fddad75165cc)
124
+ * Support for pip 10.0.1 - [286f679](https://github.com/pivotal/LicenseFinder/commit/286f6790dc71c97c0e93ecdfe0c6fddad75165cc)
111
125
 
112
126
  # [5.1.1] / 2018-05-08
113
127
 
@@ -117,55 +131,55 @@ Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://
117
131
  ### Fixed
118
132
  * Yarn package manager now handles non-ASCII characters
119
133
  * in_umbrella: true dependencies for Mix
120
- * Pivotal Repo Renamed to Pivotal-legacy
134
+ * Pivotal Repo Renamed to pivotal
121
135
 
122
136
  # [5.1.0] / 2018-04-02
123
137
 
124
138
  ### Added
125
- * Support for Ruby 2.5.1 - [9c82a84](https://github.com/pivotal-legacy/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
126
- * Support for Scala build Tool (sbt ) - [2115ddf](https://github.com/pivotal-legacy/LicenseFinder/commit/2115ddfe9481d17e6b1d0ac63d6ae1c6143f370c) - Bradford D. Boyle
127
- * Condense gvt paths with identical shas into their common path - [9e1071d](https://github.com/pivotal-legacy/LicenseFinder/commit/9e1071d3c92405a8605727ad1164d6581dc50533)
139
+ * Support for Ruby 2.5.1 - [9c82a84](https://github.com/pivotal/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
140
+ * Support for Scala build Tool (sbt ) - [2115ddf](https://github.com/pivotal/LicenseFinder/commit/2115ddfe9481d17e6b1d0ac63d6ae1c6143f370c) - Bradford D. Boyle
141
+ * Condense gvt paths with identical shas into their common path - [9e1071d](https://github.com/pivotal/LicenseFinder/commit/9e1071d3c92405a8605727ad1164d6581dc50533)
128
142
 
129
143
  ### Fixed
130
- * Added back the pip prepare commands [#156376451 finish] - [fdd63fb](https://github.com/pivotal-legacy/LicenseFinder/commit/fdd63fb38332230e0cce0ee1b47aa5ccd0eebc36)
131
- * Govendor not consolidating common paths from the same SHA - [bdd23c9](https://github.com/pivotal-legacy/LicenseFinder/commit/bdd23c94ae6ff09a2466c8875e554de60db6603c)
144
+ * Added back the pip prepare commands [#156376451 finish] - [fdd63fb](https://github.com/pivotal/LicenseFinder/commit/fdd63fb38332230e0cce0ee1b47aa5ccd0eebc36)
145
+ * Govendor not consolidating common paths from the same SHA - [bdd23c9](https://github.com/pivotal/LicenseFinder/commit/bdd23c94ae6ff09a2466c8875e554de60db6603c)
132
146
 
133
147
  ### Deprecated
134
148
  * Support for Ruby 2.1
135
149
  * Support for Ruby 2.2
136
- * Support for jruby - [9c82a84](https://github.com/pivotal-legacy/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
150
+ * Support for jruby - [9c82a84](https://github.com/pivotal/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
137
151
 
138
152
  # [5.0.3] / 2018-02-13
139
153
 
140
154
  ### Changed
141
- * Add the -vendor-only flag to dep-ensure calls - [e305bd1](https://github.com/pivotal-legacy/LicenseFinder/commit/e305bd1d5b2d9653f828c3940b59a12903904699)
142
- * Update detected paths for Nuget - [3fe8995](https://github.com/pivotal-legacy/LicenseFinder/commit/3fe89955d82c3467628abbd2ca9ba159bfeb7df6)
155
+ * Add the -vendor-only flag to dep-ensure calls - [e305bd1](https://github.com/pivotal/LicenseFinder/commit/e305bd1d5b2d9653f828c3940b59a12903904699)
156
+ * Update detected paths for Nuget - [3fe8995](https://github.com/pivotal/LicenseFinder/commit/3fe89955d82c3467628abbd2ca9ba159bfeb7df6)
143
157
 
144
158
  # [5.0.2] / 2018-02-06
145
159
 
146
160
  ### Fixed
147
- * Add conditional production flag to npm - [533f9b8](https://github.com/pivotal-legacy/LicenseFinder/commit/533f9b8fda250655f3613444da49fdce60215237)
148
- * conan install & info commands - [322e64c](https://github.com/pivotal-legacy/LicenseFinder/commit/322e64c402f4e45d97c6f3bf67c3ffdaabbb359f)
149
- * Duplicate approvals in decisions file - [a8e6141](https://github.com/pivotal-legacy/LicenseFinder/commit/a8e6141cd7ac7ed2aa10b35c55954a48bacf3523)
150
- * log path issues - [9f1bae1](https://github.com/pivotal-legacy/LicenseFinder/commit/9f1bae12c88771229e0a919876f4de6bcad31677)
161
+ * Add conditional production flag to npm - [533f9b8](https://github.com/pivotal/LicenseFinder/commit/533f9b8fda250655f3613444da49fdce60215237)
162
+ * conan install & info commands - [322e64c](https://github.com/pivotal/LicenseFinder/commit/322e64c402f4e45d97c6f3bf67c3ffdaabbb359f)
163
+ * Duplicate approvals in decisions file - [a8e6141](https://github.com/pivotal/LicenseFinder/commit/a8e6141cd7ac7ed2aa10b35c55954a48bacf3523)
164
+ * log path issues - [9f1bae1](https://github.com/pivotal/LicenseFinder/commit/9f1bae12c88771229e0a919876f4de6bcad31677)
151
165
 
152
- * Fix yarn not working with --project_path option - [c6ed08d](https://github.com/pivotal-legacy/LicenseFinder/commit/c6ed08dd8342dec9fcc3e6377f88d5ef01600928)
166
+ * Fix yarn not working with --project_path option - [c6ed08d](https://github.com/pivotal/LicenseFinder/commit/c6ed08dd8342dec9fcc3e6377f88d5ef01600928)
153
167
 
154
168
  # [5.0.0] / 2018-01-15
155
169
 
156
170
  ### Added
157
- * NPM prepare - [e7a0d30](https://github.com/pivotal-legacy/LicenseFinder/commit/e7a0d30cb77e5503b5a934b26dbd3dc272dc5605)
158
- * Specify log directory for prepare - [b9a5991](https://github.com/pivotal-legacy/LicenseFinder/commit/b9a599171f3fda2affa9381d998e2158a2bf7fac)
171
+ * NPM prepare - [e7a0d30](https://github.com/pivotal/LicenseFinder/commit/e7a0d30cb77e5503b5a934b26dbd3dc272dc5605)
172
+ * Specify log directory for prepare - [b9a5991](https://github.com/pivotal/LicenseFinder/commit/b9a599171f3fda2affa9381d998e2158a2bf7fac)
159
173
 
160
- * Added prepare step for elixir projects - [38b08ea](https://github.com/pivotal-legacy/LicenseFinder/commit/38b08eae23b6b0c2bbaa3aea7845ab6a8d9b028b)
174
+ * Added prepare step for elixir projects - [38b08ea](https://github.com/pivotal/LicenseFinder/commit/38b08eae23b6b0c2bbaa3aea7845ab6a8d9b028b)
161
175
 
162
176
  ### Fixed
163
- * Action_items resolves decisions file path - [c2a92ab](https://github.com/pivotal-legacy/LicenseFinder/commit/c2a92ab62203efb890dfeb1798d377c8d835feb6)
177
+ * Action_items resolves decisions file path - [c2a92ab](https://github.com/pivotal/LicenseFinder/commit/c2a92ab62203efb890dfeb1798d377c8d835feb6)
164
178
 
165
- * Bower prepare step - [bb11d7f](https://github.com/pivotal-legacy/LicenseFinder/commit/bb11d7f07cc5e436381f01245a46033af6bb2d3b)
179
+ * Bower prepare step - [bb11d7f](https://github.com/pivotal/LicenseFinder/commit/bb11d7f07cc5e436381f01245a46033af6bb2d3b)
166
180
 
167
181
  ### Changed
168
- * Package Manager will now log if prepare step fails. Instead of erroring out - [54da71e](https://github.com/pivotal-legacy/LicenseFinder/commit/54da71e98f14cd199c39dfd7b762030fcac60ccb)
182
+ * Package Manager will now log if prepare step fails. Instead of erroring out - [54da71e](https://github.com/pivotal/LicenseFinder/commit/54da71e98f14cd199c39dfd7b762030fcac60ccb)
169
183
 
170
184
  # [4.0.2] / 2017-11-16
171
185
 
@@ -430,7 +444,7 @@ Bugfixes:
430
444
  * Bugfixes
431
445
 
432
446
  * Process incorrectly-defined dependencies.
433
- [Original issue.](https://github.com/pivotal-legacy/LicenseFinder/issues/108)
447
+ [Original issue.](https://github.com/pivotal/LicenseFinder/issues/108)
434
448
  * Allow license_finder to process incorrectly-defined dependencies.
435
449
 
436
450
 
@@ -679,33 +693,34 @@ Bugfixes:
679
693
  * Fix blow up if there's not `ignore_groups` setting in the config file.
680
694
 
681
695
 
682
- [Unreleased]: https://github.com/pivotal-legacy/LicenseFinder/compare/v4.0.2...HEAD
683
- [4.0.2]: https://github.com/pivotal-legacy/LicenseFinder/compare/v4.0.1...v4.0.2
684
- [4.0.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v4.0.0...v4.0.1
685
- [4.0.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v3.1.0...v4.0.0
686
- [3.1.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v3.0.4...v3.1.0
687
- [3.0.4]: https://github.com/pivotal-legacy/LicenseFinder/compare/v3.0.2...v3.0.4
688
- [3.0.2]: https://github.com/pivotal-legacy/LicenseFinder/compare/v3.0.1...v3.0.2
689
- [3.0.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v3.0.0...v3.0.1
690
- [3.0.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v2.1.2...v3.0.0
691
- [5.0.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v4.0.2...v5.0.0
692
- [5.0.2]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.0.0...v5.0.2
693
- [5.0.3]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.0.2...v5.0.3
694
- [5.1.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.0.3...v5.1.0
695
- [5.1.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.1.0...v5.1.1
696
- [5.1.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.1.0...v5.1.1
697
- [5.2.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.1.1...v5.2.0
698
- [5.2.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.2.0...v5.2.1
699
- [5.2.3]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.2.1...v5.2.3
700
- [5.3.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.2.3...v5.3.0
701
- [5.4.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.3.0...v5.4.0
702
- [5.4.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.4.0...v5.4.1
703
- [5.5.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.4.1...v5.5.0
704
- [5.5.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.5.0...v5.5.1
705
- [5.5.2]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.5.1...v5.5.2
706
- [5.6.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.5.2...v5.6.0
707
- [5.6.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.6.0...v5.6.1
708
- [5.6.2]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.6.1...v5.6.2
709
- [5.7.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.6.2...v5.7.0
710
- [5.7.1]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.7.0...v5.7.1
711
- [5.8.0]: https://github.com/pivotal-legacy/LicenseFinder/compare/v5.7.1...v5.8.0
696
+ [Unreleased]: https://github.com/pivotal/LicenseFinder/compare/v4.0.2...HEAD
697
+ [4.0.2]: https://github.com/pivotal/LicenseFinder/compare/v4.0.1...v4.0.2
698
+ [4.0.1]: https://github.com/pivotal/LicenseFinder/compare/v4.0.0...v4.0.1
699
+ [4.0.0]: https://github.com/pivotal/LicenseFinder/compare/v3.1.0...v4.0.0
700
+ [3.1.0]: https://github.com/pivotal/LicenseFinder/compare/v3.0.4...v3.1.0
701
+ [3.0.4]: https://github.com/pivotal/LicenseFinder/compare/v3.0.2...v3.0.4
702
+ [3.0.2]: https://github.com/pivotal/LicenseFinder/compare/v3.0.1...v3.0.2
703
+ [3.0.1]: https://github.com/pivotal/LicenseFinder/compare/v3.0.0...v3.0.1
704
+ [3.0.0]: https://github.com/pivotal/LicenseFinder/compare/v2.1.2...v3.0.0
705
+ [5.0.0]: https://github.com/pivotal/LicenseFinder/compare/v4.0.2...v5.0.0
706
+ [5.0.2]: https://github.com/pivotal/LicenseFinder/compare/v5.0.0...v5.0.2
707
+ [5.0.3]: https://github.com/pivotal/LicenseFinder/compare/v5.0.2...v5.0.3
708
+ [5.1.0]: https://github.com/pivotal/LicenseFinder/compare/v5.0.3...v5.1.0
709
+ [5.1.1]: https://github.com/pivotal/LicenseFinder/compare/v5.1.0...v5.1.1
710
+ [5.1.1]: https://github.com/pivotal/LicenseFinder/compare/v5.1.0...v5.1.1
711
+ [5.2.0]: https://github.com/pivotal/LicenseFinder/compare/v5.1.1...v5.2.0
712
+ [5.2.1]: https://github.com/pivotal/LicenseFinder/compare/v5.2.0...v5.2.1
713
+ [5.2.3]: https://github.com/pivotal/LicenseFinder/compare/v5.2.1...v5.2.3
714
+ [5.3.0]: https://github.com/pivotal/LicenseFinder/compare/v5.2.3...v5.3.0
715
+ [5.4.0]: https://github.com/pivotal/LicenseFinder/compare/v5.3.0...v5.4.0
716
+ [5.4.1]: https://github.com/pivotal/LicenseFinder/compare/v5.4.0...v5.4.1
717
+ [5.5.0]: https://github.com/pivotal/LicenseFinder/compare/v5.4.1...v5.5.0
718
+ [5.5.1]: https://github.com/pivotal/LicenseFinder/compare/v5.5.0...v5.5.1
719
+ [5.5.2]: https://github.com/pivotal/LicenseFinder/compare/v5.5.1...v5.5.2
720
+ [5.6.0]: https://github.com/pivotal/LicenseFinder/compare/v5.5.2...v5.6.0
721
+ [5.6.1]: https://github.com/pivotal/LicenseFinder/compare/v5.6.0...v5.6.1
722
+ [5.6.2]: https://github.com/pivotal/LicenseFinder/compare/v5.6.1...v5.6.2
723
+ [5.7.0]: https://github.com/pivotal/LicenseFinder/compare/v5.6.2...v5.7.0
724
+ [5.7.1]: https://github.com/pivotal/LicenseFinder/compare/v5.7.0...v5.7.1
725
+ [5.8.0]: https://github.com/pivotal/LicenseFinder/compare/v5.7.1...v5.8.0
726
+ [5.9.0]: https://github.com/pivotal/LicenseFinder/compare/v5.8.0...v5.9.0
data/CONTRIBUTING.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  ## TL;DR
4
4
 
5
- * Fork the project from https://github.com/pivotal-legacy/LicenseFinder
5
+ * Fork the project from https://github.com/pivotal/LicenseFinder
6
6
  * Create a feature branch.
7
7
  * Make your feature addition or bug fix. Please make sure there is appropriate test coverage.
8
8
  * Rebase on top of master.
@@ -37,14 +37,14 @@ docker run -v $PWD:/scan -it licensefinder/license_finder /bin/bash -l
37
37
  ## Adding Package Managers
38
38
 
39
39
  There are a few steps to adding a new package manager.
40
- The main things which need to be implemented are mentioned in [Package Manager](https://github.com/pivotal-legacy/LicenseFinder/blob/master/lib/license_finder/package_manager.rb).
40
+ The main things which need to be implemented are mentioned in [Package Manager](https://github.com/pivotal/LicenseFinder/blob/master/lib/license_finder/package_manager.rb).
41
41
 
42
- [Here](https://github.com/pivotal-legacy/LicenseFinder/compare/v2.0.0...v2.0.1) is how
42
+ [Here](https://github.com/pivotal/LicenseFinder/compare/v2.0.0...v2.0.1) is how
43
43
  support was added for `rebar`, an `erlang` package manager.
44
44
 
45
45
  There are feature tests and unit tests for each currently supported package manager.
46
- * [Feature test example](https://github.com/pivotal-legacy/LicenseFinder/blob/master/features/features/package_managers/gvt_spec.rb)
47
- * [Unit test example](https://github.com/pivotal-legacy/LicenseFinder/blob/master/spec/lib/license_finder/package_managers/gvt_spec.rb)
46
+ * [Feature test example](https://github.com/pivotal/LicenseFinder/blob/master/features/features/package_managers/gvt_spec.rb)
47
+ * [Unit test example](https://github.com/pivotal/LicenseFinder/blob/master/spec/lib/license_finder/package_managers/gvt_spec.rb)
48
48
 
49
49
  ## Adding Licenses
50
50
 
@@ -62,7 +62,7 @@ submitting a pull request which adds new columns to
62
62
  It is also possible to generate a custom report from an ERB template. Use this
63
63
  [example](https://gist.github.com/mainej/b190d2f138c2b9e2e20a) as a starting
64
64
  point. These reports will have access to the helpers in
65
- [`LicenseFinder::ErbReport`](https://github.com/pivotal-legacy/LicenseFinder/blob/master/lib/license_finder/reports/erb_report.rb).
65
+ [`LicenseFinder::ErbReport`](https://github.com/pivotal/LicenseFinder/blob/master/lib/license_finder/reports/erb_report.rb).
66
66
 
67
67
  If you need a report with more detailed data or in a different format, we
68
68
  recommend writing a custom ruby script. This
data/Dockerfile CHANGED
@@ -9,6 +9,7 @@ ENV GRADLE_VERSION 4.10.3
9
9
  ENV RUBY_VERSION 2.6.1
10
10
  ENV MIX_VERSION 1.0
11
11
  ENV JDK_VERISON 8u211
12
+ ENV COMPOSER_ALLOW_SUPERUSER 1
12
13
 
13
14
  # programs needed for building
14
15
  RUN apt-get update && apt-get install -y \
@@ -17,10 +18,12 @@ RUN apt-get update && apt-get install -y \
17
18
  git-core \
18
19
  sudo \
19
20
  unzip \
20
- wget
21
+ wget \
22
+ gnupg2 \
23
+ software-properties-common
21
24
 
22
25
  # nodejs seems to be required for the one of the gems
23
- RUN curl -sL https://deb.nodesource.com/setup_8.x | bash - && \
26
+ RUN curl -sL https://deb.nodesource.com/setup_10.x | bash - && \
24
27
  apt-get -y install nodejs
25
28
 
26
29
  # install yarn
@@ -103,10 +106,10 @@ ENV LANGUAGE=en_US:en
103
106
  ENV LC_ALL=en_US.UTF-8
104
107
 
105
108
  #install rvm
106
- RUN gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB && \
107
- curl -sSL https://rvm.io/mpapis.asc | gpg --import && \
108
- curl -sSL https://get.rvm.io | sudo bash -s stable --ruby=$RUBY_VERSION
109
- ENV PATH=/usr/local/rvm/bin:$PATH
109
+ RUN apt-add-repository -y ppa:rael-gc/rvm && \
110
+ apt update && apt install -y rvm && \
111
+ /usr/share/rvm/bin/rvm install --default $RUBY_VERSION
112
+ ENV PATH=/usr/share/rvm/bin:$PATH
110
113
 
111
114
  #install mix
112
115
  RUN wget https://packages.erlang-solutions.com/erlang-solutions_${MIX_VERSION}_all.deb && \
@@ -140,7 +143,17 @@ RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 3FA7E03280
140
143
  RUN wget -q https://packages.microsoft.com/config/ubuntu/16.04/packages-microsoft-prod.deb &&\
141
144
  sudo dpkg -i packages-microsoft-prod.deb &&\
142
145
  sudo apt-get update &&\
143
- sudo apt-get install -y dotnet-runtime-2.1
146
+ sudo apt-get install -y dotnet-runtime-2.1 dotnet-sdk-2.1
147
+
148
+ RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 4F4EA0AAE5267A6C &&\
149
+ echo "deb http://ppa.launchpad.net/ondrej/php/ubuntu xenial main" | sudo tee /etc/apt/sources.list.d/php.list &&\
150
+ apt-get update &&\
151
+ apt-get install -y php7.1-cli &&\
152
+ php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" &&\
153
+ php -r "if (hash_file('sha384', 'composer-setup.php') === '48e3236262b34d30969dca3c37281b3b4bbe3221bda826ac6a9a62d6444cdb0dcd0615698a5cbe587c3f0fe57a54d8f5') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" &&\
154
+ php composer-setup.php &&\
155
+ php -r "unlink('composer-setup.php');" &&\
156
+ mv composer.phar /usr/bin/composer
144
157
 
145
158
  # install license_finder
146
159
  COPY . /LicenseFinder
data/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # License Finder
2
2
 
3
- [![Code Climate](https://codeclimate.com/github/pivotal-legacy/LicenseFinder.png)](https://codeclimate.com/github/pivotal-legacy/LicenseFinder)
3
+ [![Code Climate](https://codeclimate.com/github/pivotal/LicenseFinder.png)](https://codeclimate.com/github/pivotal/LicenseFinder)
4
4
 
5
5
  Build status
6
6
  * Ruby 2.3.8 [![Ruby 2.3.8 build status](https://norsk.cf-app.com/api/v1/teams/main/pipelines/LicenseFinder/jobs/ruby-2.3.8/badge)](https://norsk.cf-app.com/teams/main/pipelines/LicenseFinder)
@@ -16,7 +16,7 @@ detect the licenses of the packages in them, compare those licenses
16
16
  against a user-defined whitelist, and give you an actionable exception
17
17
  report.
18
18
 
19
- * code: https://github.com/pivotal-legacy/LicenseFinder
19
+ * code: https://github.com/pivotal/LicenseFinder
20
20
  * ci: https://norsk.cf-app.com/teams/main/pipelines/LicenseFinder
21
21
  * docker: [licensefinder/license_finder](https://hub.docker.com/r/licensefinder/license_finder/)
22
22
  * the docker image contains all the package managers needed to run `license_finder`
@@ -52,6 +52,7 @@ report.
52
52
  * Scala (via `sbt`)
53
53
  * Rust (via `cargo`)
54
54
  * Go Modules (via `go mod`)
55
+ * PHP (via `composer`)
55
56
 
56
57
  ## Installation
57
58
 
@@ -157,7 +158,7 @@ passed to it from that directory.
157
158
  Note that the docker image will run the gem which is installed within it.
158
159
  So the docker image tagged `4.0.2` will run *License Finder Version 4.0.2*
159
160
 
160
- See the [contibuting guide](https://github.com/pivotal-legacy/LicenseFinder/blob/master/CONTRIBUTING.md) for information on development.
161
+ See the [contibuting guide](https://github.com/pivotal/LicenseFinder/blob/master/CONTRIBUTING.md) for information on development.
161
162
 
162
163
  ### Activation
163
164
 
@@ -176,6 +177,7 @@ languages, as long as that language has a package definition in the project dire
176
177
  * `rebar.config` (for `rebar`)
177
178
  * `mix.exs` (for `mix`)
178
179
  * `packages/` directory (for `nuget`)
180
+ * `*.csproj` (for `dotnet`)
179
181
  * `vendor/manifest` or `*/vendor/manifest` file (for `gvt`)
180
182
  * `glide.lock` file (for `glide`)
181
183
  * `vendor/vendor.json` file (for `govendor`)
@@ -186,6 +188,7 @@ languages, as long as that language has a package definition in the project dire
186
188
  * `conanfile.txt` file (for `conan`)
187
189
  * `build.sbt` file (for `sbt`)
188
190
  * `Cargo.lock` file (for `cargo`)
191
+ * `composer.lock` file (for `composer`)
189
192
 
190
193
 
191
194
  ### Continuous Integration
@@ -297,7 +300,7 @@ explicitly declare a license, yarn indicates that it has inferred the license ba
297
300
  on some keywords in other files by appending an asterisk to the license name. If you
298
301
  see a * at the end of the license name, this is intended.
299
302
 
300
- See [CONTRIBUTING.md](https://github.com/pivotal-legacy/LicenseFinder/blob/master/CONTRIBUTING.md#adding-reports)
303
+ See [CONTRIBUTING.md](https://github.com/pivotal/LicenseFinder/blob/master/CONTRIBUTING.md#adding-reports)
301
304
  for advice about adding and customizing reports.
302
305
 
303
306
 
@@ -310,11 +313,11 @@ you should manually research what the actual license is. When you
310
313
  have established the real license, you can record it with:
311
314
 
312
315
  ```sh
313
- $ license_finder licenses add my_unknown_dependency MIT
316
+ $ license_finder dependencies add my_unknown_dependency MIT --homepage="www.unknown-code.org"
314
317
  ```
315
318
 
316
319
  This command would assign the MIT license to the dependency
317
- `my_unknown_dependency`.
320
+ `my_unknown_dependency`. It will also set its homepage to `wwww.unknown-code.org`.
318
321
 
319
322
 
320
323
  ### Adding Hidden Dependencies
@@ -481,7 +484,7 @@ And save a `LICENSE` file which contains your license text in your repo.
481
484
  * Yarn
482
485
  * A module that is incompatible with the platform on which
483
486
  license_finder is run will always be reported to have a license type
484
- of "unknown". ([#456](https://github.com/pivotal-legacy/LicenseFinder/issues/456))
487
+ of "unknown". ([#456](https://github.com/pivotal/LicenseFinder/issues/456))
485
488
 
486
489
  ## Support
487
490
 
@@ -491,7 +494,7 @@ And save a `LICENSE` file which contains your license text in your repo.
491
494
 
492
495
  ## Contributing
493
496
 
494
- See [CONTRIBUTING.md](https://github.com/pivotal-legacy/LicenseFinder/blob/master/CONTRIBUTING.md).
497
+ See [CONTRIBUTING.md](https://github.com/pivotal/LicenseFinder/blob/master/CONTRIBUTING.md).
495
498
 
496
499
 
497
500
  ## License