license_finder 5.8.0 → 5.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +99 -84
- data/CONTRIBUTING.md +6 -6
- data/Dockerfile +20 -7
- data/README.md +11 -8
- data/Rakefile +1 -8
- data/VERSION +1 -1
- data/ci/pipelines/pull-request.yml.erb +7 -7
- data/ci/pipelines/release.yml.erb +4 -4
- data/ci/scripts/updateChangelog.sh +2 -2
- data/lib/license_finder/cli/dependencies.rb +3 -1
- data/lib/license_finder/cli/main.rb +1 -0
- data/lib/license_finder/decision_applier.rb +7 -0
- data/lib/license_finder/decisions.rb +11 -0
- data/lib/license_finder/license/definitions.rb +69 -6
- data/lib/license_finder/license/templates/Apache1_1.txt +16 -0
- data/lib/license_finder/license/templates/EPL1.txt +86 -0
- data/lib/license_finder/license/templates/LGPL2_1.txt +169 -0
- data/lib/license_finder/package.rb +4 -1
- data/lib/license_finder/package_manager.rb +1 -0
- data/lib/license_finder/package_managers/bundler.rb +12 -4
- data/lib/license_finder/package_managers/composer.rb +55 -0
- data/lib/license_finder/package_managers/gvt.rb +5 -22
- data/lib/license_finder/package_managers/npm.rb +3 -1
- data/lib/license_finder/packages/composer_package.rb +9 -0
- data/lib/license_finder/packages/npm_package.rb +6 -0
- data/lib/license_finder/scanner.rb +2 -1
- data/license_finder.gemspec +2 -2
- metadata +10 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 87e2fb9a0a1beaf1437eff63ee1eecfbd23ecdfd019ff58f73b73f076d82b9f2
|
|
4
|
+
data.tar.gz: e4af0df365e10dac163c552e424234f2e36743ecd476b780dc5b89a5c1bdd05a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 33c3471401b4761ad882bc68a7a0872fe00c9a0c9c06f7cba3d70bef058442784c70549bf00ca1b8307a176073d6abc137f9ae8f9032cdb680669b3857aff82c
|
|
7
|
+
data.tar.gz: eb5bfa7f900b7d0aa452f68b518d31eda5fe9b07a483caa0f6129cc7c75f8b8f560c2517dd28fe3025373f0df44e57f11b100f6f21ab22493e0a97426e4e95a3
|
data/CHANGELOG.md
CHANGED
|
@@ -1,83 +1,97 @@
|
|
|
1
|
+
# [5.9.0] / 2019-06-10
|
|
2
|
+
|
|
3
|
+
### Added
|
|
4
|
+
* composer PHP support - [c671309](https://github.com/pivotal/LicenseFinder/commit/c671309d89c54a4dfac3ac40aab1bf70e3c3f6a2)
|
|
5
|
+
* composer support - [13ecaab](https://github.com/pivotal/LicenseFinder/commit/13ecaab7ee55c95ca973b74950fb10c3daea0784) - Zachary Knight
|
|
6
|
+
* --homepage option to `dependencies add` - [b7f7ef8](https://github.com/pivotal/LicenseFinder/commit/b7f7ef8b81d193b5535cb3c48b9244ecd446057f)
|
|
7
|
+
|
|
8
|
+
### Fixed
|
|
9
|
+
* 'dotnet restore' failing - [dee1045](https://github.com/pivotal/LicenseFinder/commit/dee104517e0cf8ce769405910f46607a66017f40)
|
|
10
|
+
* Reporting extra paths for gvt projects - [ba7d1bd](https://github.com/pivotal/LicenseFinder/commit/ba7d1bdd90282e7d127c3ddaf68b51f98b402000)
|
|
11
|
+
|
|
12
|
+
### Changed
|
|
13
|
+
* Fix license definition tests - [15b524f](https://github.com/pivotal/LicenseFinder/commit/15b524fa52f63e04a82d160a7fc3d49c288d01e8)
|
|
14
|
+
|
|
1
15
|
# [5.8.0] / 2019-05-22
|
|
2
16
|
|
|
3
17
|
### Added
|
|
4
|
-
* Trash Package Manager - [3a3d854](https://github.com/pivotal
|
|
18
|
+
* Trash Package Manager - [3a3d854](https://github.com/pivotal/LicenseFinder/commit/3a3d8541c4ea64607df6b120111aff324f93778d)
|
|
5
19
|
|
|
6
20
|
### Fixed
|
|
7
|
-
* Prefer to use `origin` over `path` for govendor - [31c6041](https://github.com/pivotal
|
|
21
|
+
* Prefer to use `origin` over `path` for govendor - [31c6041](https://github.com/pivotal/LicenseFinder/commit/31c6041926a27b61c35c05c6433a87d0af78c1e5)
|
|
8
22
|
|
|
9
23
|
# [5.7.1] / 2019-03-08
|
|
10
24
|
|
|
11
25
|
# [5.7.0] / 2019-03-01
|
|
12
26
|
|
|
13
27
|
### Added
|
|
14
|
-
* Ruby 2.6.1 support - [8d60ed1](https://github.com/pivotal
|
|
28
|
+
* Ruby 2.6.1 support - [8d60ed1](https://github.com/pivotal/LicenseFinder/commit/8d60ed13f99b830cc1352900f90e2b298105f518)
|
|
15
29
|
|
|
16
30
|
### Changed
|
|
17
|
-
* Conan version is locked to 1.11.2 to avoid breaking changes - [72b766a](https://github.com/pivotal
|
|
31
|
+
* Conan version is locked to 1.11.2 to avoid breaking changes - [72b766a](https://github.com/pivotal/LicenseFinder/commit/72b766a948be5b0f8eade75e716796f50ea9ebf3)
|
|
18
32
|
|
|
19
33
|
# [5.6.2] / 2019-01-28
|
|
20
34
|
|
|
21
35
|
# [5.6.1] / 2019-01-25
|
|
22
36
|
|
|
23
37
|
### Changed
|
|
24
|
-
* Updated GOLANG to 1.11.4 in Docker image [#163424880] - [67e5e1f](https://github.com/pivotal
|
|
38
|
+
* Updated GOLANG to 1.11.4 in Docker image [#163424880] - [67e5e1f](https://github.com/pivotal/LicenseFinder/commit/67e5e1ffef19acf3a63cac55c5aa3626fb4c7491)
|
|
25
39
|
|
|
26
40
|
# [5.6.0] / 2018-12-19
|
|
27
41
|
|
|
28
42
|
### Added
|
|
29
|
-
* Add support for JSON reports [#161595251] - [5a1f735](https://github.com/pivotal
|
|
30
|
-
* Removed the removal of nested projects - [6e1941c](https://github.com/pivotal
|
|
31
|
-
* Show verbose errors from prepare commands [#161462746] - [2b14299](https://github.com/pivotal
|
|
43
|
+
* Add support for JSON reports [#161595251] - [5a1f735](https://github.com/pivotal/LicenseFinder/commit/5a1f73515c83cbf8ce17275c4c9d1af43d0db772)
|
|
44
|
+
* Removed the removal of nested projects - [6e1941c](https://github.com/pivotal/LicenseFinder/commit/6e1941c4d06676988ff8bdad81bd83a4bb5c17e9)
|
|
45
|
+
* Show verbose errors from prepare commands [#161462746] - [2b14299](https://github.com/pivotal/LicenseFinder/commit/2b142995d06572f772104c39437d0b64f9569f79)
|
|
32
46
|
|
|
33
|
-
* Support to find gradle.kts files [#161629958] - [f7cb587](https://github.com/pivotal
|
|
47
|
+
* Support to find gradle.kts files [#161629958] - [f7cb587](https://github.com/pivotal/LicenseFinder/commit/f7cb587787f4de282c34afe66c0a2d0c1c72a84f)
|
|
34
48
|
|
|
35
49
|
### Fixed
|
|
36
|
-
* Go modules reports incorrect install paths - [9ab5aa9](https://github.com/pivotal
|
|
37
|
-
Revert "* Go modules reports incorrect install paths" - [fcead98](https://github.com/pivotal
|
|
50
|
+
* Go modules reports incorrect install paths - [9ab5aa9](https://github.com/pivotal/LicenseFinder/commit/9ab5aa9aadc9432c5359ed2af2cb32e28fac277a)
|
|
51
|
+
Revert "* Go modules reports incorrect install paths" - [fcead98](https://github.com/pivotal/LicenseFinder/commit/fcead980ae2cc24f7193a1f38944f4df60a8c3fc)
|
|
38
52
|
|
|
39
|
-
* Fix install_paths for go mod now accurately report dependency installation directories [#161943322 finish] - [ea28c06](https://github.com/pivotal
|
|
40
|
-
* Handle log file names created with whitespaces and slashes - [7d6f9da](https://github.com/pivotal
|
|
53
|
+
* Fix install_paths for go mod now accurately report dependency installation directories [#161943322 finish] - [ea28c06](https://github.com/pivotal/LicenseFinder/commit/ea28c06898964043f5849b64b4043bde81a2d7cd)
|
|
54
|
+
* Handle log file names created with whitespaces and slashes - [7d6f9da](https://github.com/pivotal/LicenseFinder/commit/7d6f9da5006e1e7bbb71f594188ab87ee76ddfbb)
|
|
41
55
|
|
|
42
56
|
### Changed
|
|
43
|
-
* Updated go-lang to 1.11.2 in the Docker - [d720f9c](https://github.com/pivotal
|
|
57
|
+
* Updated go-lang to 1.11.2 in the Docker - [d720f9c](https://github.com/pivotal/LicenseFinder/commit/d720f9c16f82044b5024213bec41b8e9f34cf306)
|
|
44
58
|
|
|
45
59
|
# [5.5.2] / 2018-10-17
|
|
46
60
|
|
|
47
61
|
### Fixed
|
|
48
|
-
* go mod prepare command being incorrect - [480c465](https://github.com/pivotal
|
|
62
|
+
* go mod prepare command being incorrect - [480c465](https://github.com/pivotal/LicenseFinder/commit/480c4654cde7342456318ed4e28b6cebd4a09e4b)
|
|
49
63
|
|
|
50
64
|
# [5.5.1] / 2018-10-16
|
|
51
65
|
|
|
52
66
|
### Added
|
|
53
|
-
* Documentation for asterisks being added to license names [#158960018] - [154b727](https://github.com/pivotal
|
|
54
|
-
* Document the prepare option on the command line - [c283a38](https://github.com/pivotal
|
|
67
|
+
* Documentation for asterisks being added to license names [#158960018] - [154b727](https://github.com/pivotal/LicenseFinder/commit/154b7273b1c18e64afa48799b50588251f99e982)
|
|
68
|
+
* Document the prepare option on the command line - [c283a38](https://github.com/pivotal/LicenseFinder/commit/c283a38d9e8b9feefc5afe32f1df55b357a33333)
|
|
55
69
|
|
|
56
70
|
### Fixed
|
|
57
|
-
* Go modules are forced to be enabled on go mod package managers - [cf9123d](https://github.com/pivotal
|
|
71
|
+
* Go modules are forced to be enabled on go mod package managers - [cf9123d](https://github.com/pivotal/LicenseFinder/commit/cf9123d654b98cdef872d3b21631e69960abe365)
|
|
58
72
|
|
|
59
73
|
# [5.5.0] / 2018-10-11
|
|
60
74
|
|
|
61
75
|
### Added
|
|
62
|
-
* Go Module support - [8a20210](https://github.com/pivotal
|
|
76
|
+
* Go Module support - [8a20210](https://github.com/pivotal/LicenseFinder/commit/8a202109e942316434978befd33854aa985dd872)
|
|
63
77
|
|
|
64
78
|
### Changed
|
|
65
|
-
* Lowering gemspec ruby requirement to support jruby 9.1.x - [279bd25](https://github.com/pivotal
|
|
66
|
-
* Bumps rubocop to 0.59.2 - [291d335](https://github.com/pivotal
|
|
79
|
+
* Lowering gemspec ruby requirement to support jruby 9.1.x - [279bd25](https://github.com/pivotal/LicenseFinder/commit/279bd25bbebbd3851dcc0062c3c47f7c7063dad8)
|
|
80
|
+
* Bumps rubocop to 0.59.2 - [291d335](https://github.com/pivotal/LicenseFinder/commit/291d3358921dbb47bc612b77656353da07e71a2b)
|
|
67
81
|
|
|
68
82
|
### Fixed
|
|
69
|
-
* 'dlf' with no-args should get a login shell - [2b019fb](https://github.com/pivotal
|
|
70
|
-
* Do not include godep dependencies with common paths - [23e951f](https://github.com/pivotal
|
|
71
|
-
* Remove uneeded bundle install in dlf [#160758436] - [f44c73f](https://github.com/pivotal
|
|
83
|
+
* 'dlf' with no-args should get a login shell - [2b019fb](https://github.com/pivotal/LicenseFinder/commit/2b019fb1126ec2fcb9cafa092cad6d27b875e5f9) - Kim Dykeman
|
|
84
|
+
* Do not include godep dependencies with common paths - [23e951f](https://github.com/pivotal/LicenseFinder/commit/23e951fae56a43abde52ecefa73e8a5ff73bb688)
|
|
85
|
+
* Remove uneeded bundle install in dlf [#160758436] - [f44c73f](https://github.com/pivotal/LicenseFinder/commit/f44c73f6c06838a29ff9a75932e08fb1445557ca)
|
|
72
86
|
|
|
73
|
-
* dlf gemfile directory issues [#160758436 finish] - [2db3972](https://github.com/pivotal
|
|
74
|
-
Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://github.com/pivotal
|
|
87
|
+
* dlf gemfile directory issues [#160758436 finish] - [2db3972](https://github.com/pivotal/LicenseFinder/commit/2db397261654bca89771e85984b4ae6819274e55)
|
|
88
|
+
Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://github.com/pivotal/LicenseFinder/commit/6b17ddc4202518ffd167c8d38a2045a36eb00144)
|
|
75
89
|
|
|
76
90
|
# [5.4.1] / 2018-09-18
|
|
77
91
|
|
|
78
92
|
### Fixed
|
|
79
|
-
* Extra dependencies showing up for some go projects [#160438065] - [dfb1367](https://github.com/pivotal
|
|
80
|
-
* remove workspace-aggregator as a yarn dependency [#159612717 finish] - [4e0afd0](https://github.com/pivotal
|
|
93
|
+
* Extra dependencies showing up for some go projects [#160438065] - [dfb1367](https://github.com/pivotal/LicenseFinder/commit/dfb136724721843c1196e74a6b4c762538af62ba)
|
|
94
|
+
* remove workspace-aggregator as a yarn dependency [#159612717 finish] - [4e0afd0](https://github.com/pivotal/LicenseFinder/commit/4e0afd0ba79623f5bb4c055d42a76ba77ce1c785)
|
|
81
95
|
|
|
82
96
|
# [5.4.0] / 2018-08-20
|
|
83
97
|
|
|
@@ -91,23 +105,23 @@ Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://
|
|
|
91
105
|
# [5.3.0] / 2018-06-05
|
|
92
106
|
|
|
93
107
|
### Added
|
|
94
|
-
* Experimental support for Rust dependencies with Cargo - [2ef3129](https://github.com/pivotal
|
|
95
|
-
* Add project roots command to list paths to scan - [b7a22ea](https://github.com/pivotal
|
|
108
|
+
* Experimental support for Rust dependencies with Cargo - [2ef3129](https://github.com/pivotal/LicenseFinder/commit/2ef31290f7abf51db5b7173302d1e535508bbd7a)
|
|
109
|
+
* Add project roots command to list paths to scan - [b7a22ea](https://github.com/pivotal/LicenseFinder/commit/b7a22eacfac0e1b9334998de606df69ec3156f77)
|
|
96
110
|
|
|
97
111
|
### Removed
|
|
98
|
-
* Remove HTTParty dependency - [c52d014](https://github.com/pivotal
|
|
112
|
+
* Remove HTTParty dependency - [c52d014](https://github.com/pivotal/LicenseFinder/commit/c52d014df1ca9cd3838d03c60daa6fad954c5579)
|
|
99
113
|
|
|
100
114
|
# [5.2.3] / 2018-05-14
|
|
101
115
|
|
|
102
116
|
# [5.2.1] / 2018-05-14
|
|
103
117
|
|
|
104
118
|
### Changed
|
|
105
|
-
* Updated go-lang to 1.10.2 in the Docker * Updated Maven to 3.5.3 in the Docker - [1decf6a](https://github.com/pivotal
|
|
119
|
+
* Updated go-lang to 1.10.2 in the Docker * Updated Maven to 3.5.3 in the Docker - [1decf6a](https://github.com/pivotal/LicenseFinder/commit/1decf6ad27c9edf96b4f5cccd9a7ca0955fed9f2) - Mark Fioravanti
|
|
106
120
|
|
|
107
121
|
# [5.2.0] / 2018-05-09
|
|
108
122
|
|
|
109
123
|
### Fixed
|
|
110
|
-
* Support for pip 10.0.1 - [286f679](https://github.com/pivotal
|
|
124
|
+
* Support for pip 10.0.1 - [286f679](https://github.com/pivotal/LicenseFinder/commit/286f6790dc71c97c0e93ecdfe0c6fddad75165cc)
|
|
111
125
|
|
|
112
126
|
# [5.1.1] / 2018-05-08
|
|
113
127
|
|
|
@@ -117,55 +131,55 @@ Revert "* dlf gemfile directory issues [#160758436 finish]" - [6b17ddc](https://
|
|
|
117
131
|
### Fixed
|
|
118
132
|
* Yarn package manager now handles non-ASCII characters
|
|
119
133
|
* in_umbrella: true dependencies for Mix
|
|
120
|
-
* Pivotal Repo Renamed to
|
|
134
|
+
* Pivotal Repo Renamed to pivotal
|
|
121
135
|
|
|
122
136
|
# [5.1.0] / 2018-04-02
|
|
123
137
|
|
|
124
138
|
### Added
|
|
125
|
-
* Support for Ruby 2.5.1 - [9c82a84](https://github.com/pivotal
|
|
126
|
-
* Support for Scala build Tool (sbt ) - [2115ddf](https://github.com/pivotal
|
|
127
|
-
* Condense gvt paths with identical shas into their common path - [9e1071d](https://github.com/pivotal
|
|
139
|
+
* Support for Ruby 2.5.1 - [9c82a84](https://github.com/pivotal/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
|
|
140
|
+
* Support for Scala build Tool (sbt ) - [2115ddf](https://github.com/pivotal/LicenseFinder/commit/2115ddfe9481d17e6b1d0ac63d6ae1c6143f370c) - Bradford D. Boyle
|
|
141
|
+
* Condense gvt paths with identical shas into their common path - [9e1071d](https://github.com/pivotal/LicenseFinder/commit/9e1071d3c92405a8605727ad1164d6581dc50533)
|
|
128
142
|
|
|
129
143
|
### Fixed
|
|
130
|
-
* Added back the pip prepare commands [#156376451 finish] - [fdd63fb](https://github.com/pivotal
|
|
131
|
-
* Govendor not consolidating common paths from the same SHA - [bdd23c9](https://github.com/pivotal
|
|
144
|
+
* Added back the pip prepare commands [#156376451 finish] - [fdd63fb](https://github.com/pivotal/LicenseFinder/commit/fdd63fb38332230e0cce0ee1b47aa5ccd0eebc36)
|
|
145
|
+
* Govendor not consolidating common paths from the same SHA - [bdd23c9](https://github.com/pivotal/LicenseFinder/commit/bdd23c94ae6ff09a2466c8875e554de60db6603c)
|
|
132
146
|
|
|
133
147
|
### Deprecated
|
|
134
148
|
* Support for Ruby 2.1
|
|
135
149
|
* Support for Ruby 2.2
|
|
136
|
-
* Support for jruby - [9c82a84](https://github.com/pivotal
|
|
150
|
+
* Support for jruby - [9c82a84](https://github.com/pivotal/LicenseFinder/commit/9c82a84a3cff0765a45fa28dc2b05ab32880fb00)
|
|
137
151
|
|
|
138
152
|
# [5.0.3] / 2018-02-13
|
|
139
153
|
|
|
140
154
|
### Changed
|
|
141
|
-
* Add the -vendor-only flag to dep-ensure calls - [e305bd1](https://github.com/pivotal
|
|
142
|
-
* Update detected paths for Nuget - [3fe8995](https://github.com/pivotal
|
|
155
|
+
* Add the -vendor-only flag to dep-ensure calls - [e305bd1](https://github.com/pivotal/LicenseFinder/commit/e305bd1d5b2d9653f828c3940b59a12903904699)
|
|
156
|
+
* Update detected paths for Nuget - [3fe8995](https://github.com/pivotal/LicenseFinder/commit/3fe89955d82c3467628abbd2ca9ba159bfeb7df6)
|
|
143
157
|
|
|
144
158
|
# [5.0.2] / 2018-02-06
|
|
145
159
|
|
|
146
160
|
### Fixed
|
|
147
|
-
* Add conditional production flag to npm - [533f9b8](https://github.com/pivotal
|
|
148
|
-
* conan install & info commands - [322e64c](https://github.com/pivotal
|
|
149
|
-
* Duplicate approvals in decisions file - [a8e6141](https://github.com/pivotal
|
|
150
|
-
* log path issues - [9f1bae1](https://github.com/pivotal
|
|
161
|
+
* Add conditional production flag to npm - [533f9b8](https://github.com/pivotal/LicenseFinder/commit/533f9b8fda250655f3613444da49fdce60215237)
|
|
162
|
+
* conan install & info commands - [322e64c](https://github.com/pivotal/LicenseFinder/commit/322e64c402f4e45d97c6f3bf67c3ffdaabbb359f)
|
|
163
|
+
* Duplicate approvals in decisions file - [a8e6141](https://github.com/pivotal/LicenseFinder/commit/a8e6141cd7ac7ed2aa10b35c55954a48bacf3523)
|
|
164
|
+
* log path issues - [9f1bae1](https://github.com/pivotal/LicenseFinder/commit/9f1bae12c88771229e0a919876f4de6bcad31677)
|
|
151
165
|
|
|
152
|
-
* Fix yarn not working with --project_path option - [c6ed08d](https://github.com/pivotal
|
|
166
|
+
* Fix yarn not working with --project_path option - [c6ed08d](https://github.com/pivotal/LicenseFinder/commit/c6ed08dd8342dec9fcc3e6377f88d5ef01600928)
|
|
153
167
|
|
|
154
168
|
# [5.0.0] / 2018-01-15
|
|
155
169
|
|
|
156
170
|
### Added
|
|
157
|
-
* NPM prepare - [e7a0d30](https://github.com/pivotal
|
|
158
|
-
* Specify log directory for prepare - [b9a5991](https://github.com/pivotal
|
|
171
|
+
* NPM prepare - [e7a0d30](https://github.com/pivotal/LicenseFinder/commit/e7a0d30cb77e5503b5a934b26dbd3dc272dc5605)
|
|
172
|
+
* Specify log directory for prepare - [b9a5991](https://github.com/pivotal/LicenseFinder/commit/b9a599171f3fda2affa9381d998e2158a2bf7fac)
|
|
159
173
|
|
|
160
|
-
* Added prepare step for elixir projects - [38b08ea](https://github.com/pivotal
|
|
174
|
+
* Added prepare step for elixir projects - [38b08ea](https://github.com/pivotal/LicenseFinder/commit/38b08eae23b6b0c2bbaa3aea7845ab6a8d9b028b)
|
|
161
175
|
|
|
162
176
|
### Fixed
|
|
163
|
-
* Action_items resolves decisions file path - [c2a92ab](https://github.com/pivotal
|
|
177
|
+
* Action_items resolves decisions file path - [c2a92ab](https://github.com/pivotal/LicenseFinder/commit/c2a92ab62203efb890dfeb1798d377c8d835feb6)
|
|
164
178
|
|
|
165
|
-
* Bower prepare step - [bb11d7f](https://github.com/pivotal
|
|
179
|
+
* Bower prepare step - [bb11d7f](https://github.com/pivotal/LicenseFinder/commit/bb11d7f07cc5e436381f01245a46033af6bb2d3b)
|
|
166
180
|
|
|
167
181
|
### Changed
|
|
168
|
-
* Package Manager will now log if prepare step fails. Instead of erroring out - [54da71e](https://github.com/pivotal
|
|
182
|
+
* Package Manager will now log if prepare step fails. Instead of erroring out - [54da71e](https://github.com/pivotal/LicenseFinder/commit/54da71e98f14cd199c39dfd7b762030fcac60ccb)
|
|
169
183
|
|
|
170
184
|
# [4.0.2] / 2017-11-16
|
|
171
185
|
|
|
@@ -430,7 +444,7 @@ Bugfixes:
|
|
|
430
444
|
* Bugfixes
|
|
431
445
|
|
|
432
446
|
* Process incorrectly-defined dependencies.
|
|
433
|
-
[Original issue.](https://github.com/pivotal
|
|
447
|
+
[Original issue.](https://github.com/pivotal/LicenseFinder/issues/108)
|
|
434
448
|
* Allow license_finder to process incorrectly-defined dependencies.
|
|
435
449
|
|
|
436
450
|
|
|
@@ -679,33 +693,34 @@ Bugfixes:
|
|
|
679
693
|
* Fix blow up if there's not `ignore_groups` setting in the config file.
|
|
680
694
|
|
|
681
695
|
|
|
682
|
-
[Unreleased]: https://github.com/pivotal
|
|
683
|
-
[4.0.2]: https://github.com/pivotal
|
|
684
|
-
[4.0.1]: https://github.com/pivotal
|
|
685
|
-
[4.0.0]: https://github.com/pivotal
|
|
686
|
-
[3.1.0]: https://github.com/pivotal
|
|
687
|
-
[3.0.4]: https://github.com/pivotal
|
|
688
|
-
[3.0.2]: https://github.com/pivotal
|
|
689
|
-
[3.0.1]: https://github.com/pivotal
|
|
690
|
-
[3.0.0]: https://github.com/pivotal
|
|
691
|
-
[5.0.0]: https://github.com/pivotal
|
|
692
|
-
[5.0.2]: https://github.com/pivotal
|
|
693
|
-
[5.0.3]: https://github.com/pivotal
|
|
694
|
-
[5.1.0]: https://github.com/pivotal
|
|
695
|
-
[5.1.1]: https://github.com/pivotal
|
|
696
|
-
[5.1.1]: https://github.com/pivotal
|
|
697
|
-
[5.2.0]: https://github.com/pivotal
|
|
698
|
-
[5.2.1]: https://github.com/pivotal
|
|
699
|
-
[5.2.3]: https://github.com/pivotal
|
|
700
|
-
[5.3.0]: https://github.com/pivotal
|
|
701
|
-
[5.4.0]: https://github.com/pivotal
|
|
702
|
-
[5.4.1]: https://github.com/pivotal
|
|
703
|
-
[5.5.0]: https://github.com/pivotal
|
|
704
|
-
[5.5.1]: https://github.com/pivotal
|
|
705
|
-
[5.5.2]: https://github.com/pivotal
|
|
706
|
-
[5.6.0]: https://github.com/pivotal
|
|
707
|
-
[5.6.1]: https://github.com/pivotal
|
|
708
|
-
[5.6.2]: https://github.com/pivotal
|
|
709
|
-
[5.7.0]: https://github.com/pivotal
|
|
710
|
-
[5.7.1]: https://github.com/pivotal
|
|
711
|
-
[5.8.0]: https://github.com/pivotal
|
|
696
|
+
[Unreleased]: https://github.com/pivotal/LicenseFinder/compare/v4.0.2...HEAD
|
|
697
|
+
[4.0.2]: https://github.com/pivotal/LicenseFinder/compare/v4.0.1...v4.0.2
|
|
698
|
+
[4.0.1]: https://github.com/pivotal/LicenseFinder/compare/v4.0.0...v4.0.1
|
|
699
|
+
[4.0.0]: https://github.com/pivotal/LicenseFinder/compare/v3.1.0...v4.0.0
|
|
700
|
+
[3.1.0]: https://github.com/pivotal/LicenseFinder/compare/v3.0.4...v3.1.0
|
|
701
|
+
[3.0.4]: https://github.com/pivotal/LicenseFinder/compare/v3.0.2...v3.0.4
|
|
702
|
+
[3.0.2]: https://github.com/pivotal/LicenseFinder/compare/v3.0.1...v3.0.2
|
|
703
|
+
[3.0.1]: https://github.com/pivotal/LicenseFinder/compare/v3.0.0...v3.0.1
|
|
704
|
+
[3.0.0]: https://github.com/pivotal/LicenseFinder/compare/v2.1.2...v3.0.0
|
|
705
|
+
[5.0.0]: https://github.com/pivotal/LicenseFinder/compare/v4.0.2...v5.0.0
|
|
706
|
+
[5.0.2]: https://github.com/pivotal/LicenseFinder/compare/v5.0.0...v5.0.2
|
|
707
|
+
[5.0.3]: https://github.com/pivotal/LicenseFinder/compare/v5.0.2...v5.0.3
|
|
708
|
+
[5.1.0]: https://github.com/pivotal/LicenseFinder/compare/v5.0.3...v5.1.0
|
|
709
|
+
[5.1.1]: https://github.com/pivotal/LicenseFinder/compare/v5.1.0...v5.1.1
|
|
710
|
+
[5.1.1]: https://github.com/pivotal/LicenseFinder/compare/v5.1.0...v5.1.1
|
|
711
|
+
[5.2.0]: https://github.com/pivotal/LicenseFinder/compare/v5.1.1...v5.2.0
|
|
712
|
+
[5.2.1]: https://github.com/pivotal/LicenseFinder/compare/v5.2.0...v5.2.1
|
|
713
|
+
[5.2.3]: https://github.com/pivotal/LicenseFinder/compare/v5.2.1...v5.2.3
|
|
714
|
+
[5.3.0]: https://github.com/pivotal/LicenseFinder/compare/v5.2.3...v5.3.0
|
|
715
|
+
[5.4.0]: https://github.com/pivotal/LicenseFinder/compare/v5.3.0...v5.4.0
|
|
716
|
+
[5.4.1]: https://github.com/pivotal/LicenseFinder/compare/v5.4.0...v5.4.1
|
|
717
|
+
[5.5.0]: https://github.com/pivotal/LicenseFinder/compare/v5.4.1...v5.5.0
|
|
718
|
+
[5.5.1]: https://github.com/pivotal/LicenseFinder/compare/v5.5.0...v5.5.1
|
|
719
|
+
[5.5.2]: https://github.com/pivotal/LicenseFinder/compare/v5.5.1...v5.5.2
|
|
720
|
+
[5.6.0]: https://github.com/pivotal/LicenseFinder/compare/v5.5.2...v5.6.0
|
|
721
|
+
[5.6.1]: https://github.com/pivotal/LicenseFinder/compare/v5.6.0...v5.6.1
|
|
722
|
+
[5.6.2]: https://github.com/pivotal/LicenseFinder/compare/v5.6.1...v5.6.2
|
|
723
|
+
[5.7.0]: https://github.com/pivotal/LicenseFinder/compare/v5.6.2...v5.7.0
|
|
724
|
+
[5.7.1]: https://github.com/pivotal/LicenseFinder/compare/v5.7.0...v5.7.1
|
|
725
|
+
[5.8.0]: https://github.com/pivotal/LicenseFinder/compare/v5.7.1...v5.8.0
|
|
726
|
+
[5.9.0]: https://github.com/pivotal/LicenseFinder/compare/v5.8.0...v5.9.0
|
data/CONTRIBUTING.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
## TL;DR
|
|
4
4
|
|
|
5
|
-
* Fork the project from https://github.com/pivotal
|
|
5
|
+
* Fork the project from https://github.com/pivotal/LicenseFinder
|
|
6
6
|
* Create a feature branch.
|
|
7
7
|
* Make your feature addition or bug fix. Please make sure there is appropriate test coverage.
|
|
8
8
|
* Rebase on top of master.
|
|
@@ -37,14 +37,14 @@ docker run -v $PWD:/scan -it licensefinder/license_finder /bin/bash -l
|
|
|
37
37
|
## Adding Package Managers
|
|
38
38
|
|
|
39
39
|
There are a few steps to adding a new package manager.
|
|
40
|
-
The main things which need to be implemented are mentioned in [Package Manager](https://github.com/pivotal
|
|
40
|
+
The main things which need to be implemented are mentioned in [Package Manager](https://github.com/pivotal/LicenseFinder/blob/master/lib/license_finder/package_manager.rb).
|
|
41
41
|
|
|
42
|
-
[Here](https://github.com/pivotal
|
|
42
|
+
[Here](https://github.com/pivotal/LicenseFinder/compare/v2.0.0...v2.0.1) is how
|
|
43
43
|
support was added for `rebar`, an `erlang` package manager.
|
|
44
44
|
|
|
45
45
|
There are feature tests and unit tests for each currently supported package manager.
|
|
46
|
-
* [Feature test example](https://github.com/pivotal
|
|
47
|
-
* [Unit test example](https://github.com/pivotal
|
|
46
|
+
* [Feature test example](https://github.com/pivotal/LicenseFinder/blob/master/features/features/package_managers/gvt_spec.rb)
|
|
47
|
+
* [Unit test example](https://github.com/pivotal/LicenseFinder/blob/master/spec/lib/license_finder/package_managers/gvt_spec.rb)
|
|
48
48
|
|
|
49
49
|
## Adding Licenses
|
|
50
50
|
|
|
@@ -62,7 +62,7 @@ submitting a pull request which adds new columns to
|
|
|
62
62
|
It is also possible to generate a custom report from an ERB template. Use this
|
|
63
63
|
[example](https://gist.github.com/mainej/b190d2f138c2b9e2e20a) as a starting
|
|
64
64
|
point. These reports will have access to the helpers in
|
|
65
|
-
[`LicenseFinder::ErbReport`](https://github.com/pivotal
|
|
65
|
+
[`LicenseFinder::ErbReport`](https://github.com/pivotal/LicenseFinder/blob/master/lib/license_finder/reports/erb_report.rb).
|
|
66
66
|
|
|
67
67
|
If you need a report with more detailed data or in a different format, we
|
|
68
68
|
recommend writing a custom ruby script. This
|
data/Dockerfile
CHANGED
|
@@ -9,6 +9,7 @@ ENV GRADLE_VERSION 4.10.3
|
|
|
9
9
|
ENV RUBY_VERSION 2.6.1
|
|
10
10
|
ENV MIX_VERSION 1.0
|
|
11
11
|
ENV JDK_VERISON 8u211
|
|
12
|
+
ENV COMPOSER_ALLOW_SUPERUSER 1
|
|
12
13
|
|
|
13
14
|
# programs needed for building
|
|
14
15
|
RUN apt-get update && apt-get install -y \
|
|
@@ -17,10 +18,12 @@ RUN apt-get update && apt-get install -y \
|
|
|
17
18
|
git-core \
|
|
18
19
|
sudo \
|
|
19
20
|
unzip \
|
|
20
|
-
wget
|
|
21
|
+
wget \
|
|
22
|
+
gnupg2 \
|
|
23
|
+
software-properties-common
|
|
21
24
|
|
|
22
25
|
# nodejs seems to be required for the one of the gems
|
|
23
|
-
RUN curl -sL https://deb.nodesource.com/
|
|
26
|
+
RUN curl -sL https://deb.nodesource.com/setup_10.x | bash - && \
|
|
24
27
|
apt-get -y install nodejs
|
|
25
28
|
|
|
26
29
|
# install yarn
|
|
@@ -103,10 +106,10 @@ ENV LANGUAGE=en_US:en
|
|
|
103
106
|
ENV LC_ALL=en_US.UTF-8
|
|
104
107
|
|
|
105
108
|
#install rvm
|
|
106
|
-
RUN
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
ENV PATH=/usr/
|
|
109
|
+
RUN apt-add-repository -y ppa:rael-gc/rvm && \
|
|
110
|
+
apt update && apt install -y rvm && \
|
|
111
|
+
/usr/share/rvm/bin/rvm install --default $RUBY_VERSION
|
|
112
|
+
ENV PATH=/usr/share/rvm/bin:$PATH
|
|
110
113
|
|
|
111
114
|
#install mix
|
|
112
115
|
RUN wget https://packages.erlang-solutions.com/erlang-solutions_${MIX_VERSION}_all.deb && \
|
|
@@ -140,7 +143,17 @@ RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 3FA7E03280
|
|
|
140
143
|
RUN wget -q https://packages.microsoft.com/config/ubuntu/16.04/packages-microsoft-prod.deb &&\
|
|
141
144
|
sudo dpkg -i packages-microsoft-prod.deb &&\
|
|
142
145
|
sudo apt-get update &&\
|
|
143
|
-
sudo apt-get install -y dotnet-runtime-2.1
|
|
146
|
+
sudo apt-get install -y dotnet-runtime-2.1 dotnet-sdk-2.1
|
|
147
|
+
|
|
148
|
+
RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 4F4EA0AAE5267A6C &&\
|
|
149
|
+
echo "deb http://ppa.launchpad.net/ondrej/php/ubuntu xenial main" | sudo tee /etc/apt/sources.list.d/php.list &&\
|
|
150
|
+
apt-get update &&\
|
|
151
|
+
apt-get install -y php7.1-cli &&\
|
|
152
|
+
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" &&\
|
|
153
|
+
php -r "if (hash_file('sha384', 'composer-setup.php') === '48e3236262b34d30969dca3c37281b3b4bbe3221bda826ac6a9a62d6444cdb0dcd0615698a5cbe587c3f0fe57a54d8f5') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" &&\
|
|
154
|
+
php composer-setup.php &&\
|
|
155
|
+
php -r "unlink('composer-setup.php');" &&\
|
|
156
|
+
mv composer.phar /usr/bin/composer
|
|
144
157
|
|
|
145
158
|
# install license_finder
|
|
146
159
|
COPY . /LicenseFinder
|
data/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# License Finder
|
|
2
2
|
|
|
3
|
-
[](https://codeclimate.com/github/pivotal/LicenseFinder)
|
|
4
4
|
|
|
5
5
|
Build status
|
|
6
6
|
* Ruby 2.3.8 [](https://norsk.cf-app.com/teams/main/pipelines/LicenseFinder)
|
|
@@ -16,7 +16,7 @@ detect the licenses of the packages in them, compare those licenses
|
|
|
16
16
|
against a user-defined whitelist, and give you an actionable exception
|
|
17
17
|
report.
|
|
18
18
|
|
|
19
|
-
* code: https://github.com/pivotal
|
|
19
|
+
* code: https://github.com/pivotal/LicenseFinder
|
|
20
20
|
* ci: https://norsk.cf-app.com/teams/main/pipelines/LicenseFinder
|
|
21
21
|
* docker: [licensefinder/license_finder](https://hub.docker.com/r/licensefinder/license_finder/)
|
|
22
22
|
* the docker image contains all the package managers needed to run `license_finder`
|
|
@@ -52,6 +52,7 @@ report.
|
|
|
52
52
|
* Scala (via `sbt`)
|
|
53
53
|
* Rust (via `cargo`)
|
|
54
54
|
* Go Modules (via `go mod`)
|
|
55
|
+
* PHP (via `composer`)
|
|
55
56
|
|
|
56
57
|
## Installation
|
|
57
58
|
|
|
@@ -157,7 +158,7 @@ passed to it from that directory.
|
|
|
157
158
|
Note that the docker image will run the gem which is installed within it.
|
|
158
159
|
So the docker image tagged `4.0.2` will run *License Finder Version 4.0.2*
|
|
159
160
|
|
|
160
|
-
See the [contibuting guide](https://github.com/pivotal
|
|
161
|
+
See the [contibuting guide](https://github.com/pivotal/LicenseFinder/blob/master/CONTRIBUTING.md) for information on development.
|
|
161
162
|
|
|
162
163
|
### Activation
|
|
163
164
|
|
|
@@ -176,6 +177,7 @@ languages, as long as that language has a package definition in the project dire
|
|
|
176
177
|
* `rebar.config` (for `rebar`)
|
|
177
178
|
* `mix.exs` (for `mix`)
|
|
178
179
|
* `packages/` directory (for `nuget`)
|
|
180
|
+
* `*.csproj` (for `dotnet`)
|
|
179
181
|
* `vendor/manifest` or `*/vendor/manifest` file (for `gvt`)
|
|
180
182
|
* `glide.lock` file (for `glide`)
|
|
181
183
|
* `vendor/vendor.json` file (for `govendor`)
|
|
@@ -186,6 +188,7 @@ languages, as long as that language has a package definition in the project dire
|
|
|
186
188
|
* `conanfile.txt` file (for `conan`)
|
|
187
189
|
* `build.sbt` file (for `sbt`)
|
|
188
190
|
* `Cargo.lock` file (for `cargo`)
|
|
191
|
+
* `composer.lock` file (for `composer`)
|
|
189
192
|
|
|
190
193
|
|
|
191
194
|
### Continuous Integration
|
|
@@ -297,7 +300,7 @@ explicitly declare a license, yarn indicates that it has inferred the license ba
|
|
|
297
300
|
on some keywords in other files by appending an asterisk to the license name. If you
|
|
298
301
|
see a * at the end of the license name, this is intended.
|
|
299
302
|
|
|
300
|
-
See [CONTRIBUTING.md](https://github.com/pivotal
|
|
303
|
+
See [CONTRIBUTING.md](https://github.com/pivotal/LicenseFinder/blob/master/CONTRIBUTING.md#adding-reports)
|
|
301
304
|
for advice about adding and customizing reports.
|
|
302
305
|
|
|
303
306
|
|
|
@@ -310,11 +313,11 @@ you should manually research what the actual license is. When you
|
|
|
310
313
|
have established the real license, you can record it with:
|
|
311
314
|
|
|
312
315
|
```sh
|
|
313
|
-
$ license_finder
|
|
316
|
+
$ license_finder dependencies add my_unknown_dependency MIT --homepage="www.unknown-code.org"
|
|
314
317
|
```
|
|
315
318
|
|
|
316
319
|
This command would assign the MIT license to the dependency
|
|
317
|
-
`my_unknown_dependency`.
|
|
320
|
+
`my_unknown_dependency`. It will also set its homepage to `wwww.unknown-code.org`.
|
|
318
321
|
|
|
319
322
|
|
|
320
323
|
### Adding Hidden Dependencies
|
|
@@ -481,7 +484,7 @@ And save a `LICENSE` file which contains your license text in your repo.
|
|
|
481
484
|
* Yarn
|
|
482
485
|
* A module that is incompatible with the platform on which
|
|
483
486
|
license_finder is run will always be reported to have a license type
|
|
484
|
-
of "unknown". ([#456](https://github.com/pivotal
|
|
487
|
+
of "unknown". ([#456](https://github.com/pivotal/LicenseFinder/issues/456))
|
|
485
488
|
|
|
486
489
|
## Support
|
|
487
490
|
|
|
@@ -491,7 +494,7 @@ And save a `LICENSE` file which contains your license text in your repo.
|
|
|
491
494
|
|
|
492
495
|
## Contributing
|
|
493
496
|
|
|
494
|
-
See [CONTRIBUTING.md](https://github.com/pivotal
|
|
497
|
+
See [CONTRIBUTING.md](https://github.com/pivotal/LicenseFinder/blob/master/CONTRIBUTING.md).
|
|
495
498
|
|
|
496
499
|
|
|
497
500
|
## License
|