license_scout 0.1.3 → 1.0.0

data/lib/license_scout/dependency_manager/godep.rb

@@ -0,0 +1,71 @@
+#
+# Copyright:: Copyright 2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "ffi_yajl"
+require "license_scout/dependency_manager/base"
+
+module LicenseScout
+  module DependencyManager
+    class Godep < Base
+
+      def name
+        "go_godep"
+      end
+
+      def detected?
+        File.exist?(root_godeps_file)
+      end
+
+      def dependencies
+        godeps = File.open(root_godeps_file) do |f|
+          FFI_Yajl::Parser.parse(f)
+        end
+
+        godeps["Deps"].map do |pkg_info|
+          pkg_import_name = pkg_info["ImportPath"]
+          pkg_file_name = pkg_import_name.tr("/", "_")
+          pkg_version = pkg_info["Comment"] || pkg_info["Rev"]
+          license = options.overrides.license_for("go", pkg_import_name, pkg_version)
+
+          override_license_files = options.overrides.license_files_for("go", pkg_import_name, pkg_version)
+          if override_license_files.empty?
+            license_files = find_license_files_for_package_in_gopath(pkg_import_name)
+          else
+            license_files = override_license_files.resolve_locations(gopath(pkg_import_name))
+          end
+
+          create_dependency(pkg_file_name, pkg_version, license, license_files)
+        end
+      end
+
+      private
+
+      def root_godeps_file
+        File.join(project_dir, "Godeps/Godeps.json")
+      end
+
+      def gopath(pkg)
+        "#{ENV['GOPATH']}/src/#{pkg}"
+      end
+
+      def find_license_files_for_package_in_gopath(pkg)
+        root_files = Dir["#{gopath(pkg)}/*"]
+        root_files.select { |f| POSSIBLE_LICENSE_FILES.include?(File.basename(f)) }
+      end
+    end
+  end
+end

data/lib/license_scout/dependency_manager/rebar.rb

@@ -103,46 +103,17 @@ module LicenseScout
 
         return unless File.exist?(rebar_lock_path)
 
-        # We parse the rebar.lock using 'config_to_json' from
-        # https://github.com/basho/erlang_template_helper This binary requires
-        # escript to be on the path so we use the environment provided to
-        # license_scout if available.
-
-        config_to_json_path = File.expand_path("../../../bin/config_to_json", File.dirname(__FILE__))
-        s = Mixlib::ShellOut.new("#{config_to_json_path} #{rebar_lock_path}", environment: options.environment)
+        rebar_lock_to_json_path = File.expand_path("../../../bin/rebar_lock_json", File.dirname(__FILE__))
+        s = Mixlib::ShellOut.new("#{rebar_lock_to_json_path} #{rebar_lock_path}", environment: options.environment)
         s.run_command
         s.error!
 
-        # Parsed rebar.lock will contain "type" information for each field
-        # prepended into the output array. What we get from it looks like this:
-        # [["__tuple",
-        #   "__binary_edown",
-        #   ["__tuple",
-        #    "git",
-        #    "__string_git://github.com/seth/edown.git",
-        #    ["__tuple", "ref", "__string_30a9f7867d615af45783235faa52742d11a9348e"]],
-        #   1],
-        #   ["__tuple",
-        #    "__binary_mochiweb",
-        #    ["__tuple", "pkg", "__binary_mochiweb", "__binary_2.12.2"],
-        #    2],
-        #   ...
-        #
         rebar_lock_content = FFI_Yajl::Parser.parse(s.stdout)
 
-        rebar_lock_content.each do |element|
-          # We are trying to match the mochiweb example above. Notice the 'pkg'
-          # entry in its source information. We are doing some very specific
-          # String matching here because we can not bring over
-          # erlang_template_helper gem since it is not released to rubygems.
-
-          next if !element.is_a?(Array) || element.length < 3
-          source_info = element[2]
-
-          next if !source_info.is_a?(Array) || source_info.length < 4
-          if source_info[1] == "pkg"
-            source_name = source_info[2].gsub("__binary_", "").gsub("__string_", "")
-            source_version = source_info[3].gsub("__binary_", "").gsub("__string_", "")
+        rebar_lock_content.each do |name, source_info|
+          if source_info["type"] == "pkg"
+            source_name = source_info["pkg_name"]
+            source_version = source_info["pkg_version"]
 
             packaged_dependencies[source_name] = source_version
           end

data/lib/license_scout/dependency_manager.rb

@@ -17,7 +17,10 @@
 
 require "license_scout/dependency_manager/bundler"
 require "license_scout/dependency_manager/rebar"
-require "license_scout/dependency_manager/cpan"
+require "license_scout/dependency_manager/cpanm"
+require "license_scout/dependency_manager/godep"
+require "license_scout/dependency_manager/dep"
+require "license_scout/dependency_manager/glide"
 require "license_scout/dependency_manager/berkshelf"
 require "license_scout/dependency_manager/npm"
 require "license_scout/dependency_manager/manual"
@@ -25,7 +28,7 @@ require "license_scout/dependency_manager/manual"
 module LicenseScout
   module DependencyManager
     def self.implementations
-      [Bundler, Rebar, CPAN, Berkshelf, NPM, Manual]
+      [Bundler, Rebar, Cpanm, Berkshelf, NPM, Godep, Dep, Glide, Manual]
     end
   end
 end

data/lib/license_scout/license_file_analyzer/definitions.rb

@@ -64,6 +64,7 @@ module LicenseScout
           ruby,
           bsd_2_clause,
           erlang_public,
+          chef_mlsa,
         ]
       end
 
@@ -107,7 +108,7 @@ module LicenseScout
 
       def lgpl
         License.new(
-          short_name:  "LGPL-3.0"
+          short_name: "LGPL-3.0"
         )
       end
 
@@ -207,6 +208,12 @@ module LicenseScout
         )
       end
 
+      def chef_mlsa
+        License.new(
+          short_name: "Chef-MLSA"
+        )
+      end
+
     end
   end
 end

data/lib/license_scout/license_file_analyzer/templates/Apache2.txt

@@ -168,5 +168,3 @@
       defend, and hold each Contributor harmless for any liability
       incurred by, or claims asserted against, such Contributor by reason
       of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS

data/lib/license_scout/license_file_analyzer/templates/Chef-MLSA.txt

@@ -0,0 +1,5 @@
+Use of this Software is subject to the terms of the Chef Online Master
+License and Services Agreement. You can find the latest copy of the
+agreement here:
+
+https://www.chef.io/online-master-agreement

data/lib/license_scout/net_fetcher.rb

@@ -18,6 +18,7 @@
 require "open-uri"
 require "tmpdir"
 require "digest"
+require "socket" # Defines `SocketError`
 
 require "license_scout/exceptions"
 

data/lib/license_scout/options.rb

@@ -22,7 +22,7 @@ module LicenseScout
     SUPPORTED_OPTIONS = [:overrides, :environment, :ruby_bin, :cpan_cache, :manual_licenses]
 
     SUPPORTED_OPTIONS.each do |o|
-      self.send(:attr_reader, o)
+      send(:attr_reader, o)
     end
 
     def initialize(options = {})