licensed 2.14.2 → 2.15.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/workflows/release.yml +125 -29
- data/.github/workflows/test.yml +42 -42
- data/.gitignore +1 -0
- data/CHANGELOG.md +40 -2
- data/README.md +1 -1
- data/docker/Dockerfile.build-linux +1 -0
- data/docs/sources/npm.md +1 -1
- data/lib/licensed/cli.rb +8 -2
- data/lib/licensed/commands/list.rb +7 -0
- data/lib/licensed/dependency.rb +1 -0
- data/lib/licensed/reporters/list_reporter.rb +3 -1
- data/lib/licensed/sources/cabal.rb +17 -6
- data/lib/licensed/sources/manifest.rb +1 -1
- data/lib/licensed/sources/npm.rb +57 -7
- data/lib/licensed/sources/pip.rb +1 -1
- data/lib/licensed/version.rb +1 -1
- data/script/packages/build +4 -1
- data/script/packages/linux +4 -0
- data/script/packages/mac +3 -0
- data/script/source-setup/npm +18 -1
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 13bec80f1d0dba11fc88692fe346f3dd1f2961ba79f21eb23d7c20e8e40df01b
|
|
4
|
+
data.tar.gz: bd4794c594cbe624ce18d0c3483d0ad05c3d37734b11eb376778a2f48fffd81a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: cb096d054153724f25b5dc7871131a6eb2b1a7d86360f40654af2f1f41ec62ae829e470d49818a8e943ee8d8d5b533e6407f3dc3dffe272a29c40ca7b0a03b75
|
|
7
|
+
data.tar.gz: a302d4ab4db6da100c861020527dedf4d1249f0edfbc31ffea9cef1137063e30cf51ca737f59cf90c100301748f14b84edfae61ee634d665f8fa008715257117
|
|
@@ -3,96 +3,192 @@ name: Build and publish release assets
|
|
|
3
3
|
on:
|
|
4
4
|
release:
|
|
5
5
|
types: [created]
|
|
6
|
+
workflow_dispatch:
|
|
7
|
+
inputs:
|
|
8
|
+
version:
|
|
9
|
+
description: 'Commit-like version of github/licensed to build package at'
|
|
10
|
+
required: true
|
|
11
|
+
release_tag:
|
|
12
|
+
description: 'Release tag to upload built packages to'
|
|
13
|
+
required: false
|
|
6
14
|
|
|
7
15
|
jobs:
|
|
8
|
-
|
|
16
|
+
vars:
|
|
17
|
+
name: "Gather values for remainder of steps"
|
|
9
18
|
runs-on: ubuntu-latest
|
|
19
|
+
outputs:
|
|
20
|
+
version: ${{ steps.get_version.outputs.result }}
|
|
21
|
+
upload_url: ${{ steps.get_url.outputs.result }}
|
|
22
|
+
ref: ${{ steps.get_ref.outputs.result }}
|
|
23
|
+
steps:
|
|
24
|
+
- id: get_version
|
|
25
|
+
name: Get package version
|
|
26
|
+
uses: actions/github-script@v3
|
|
27
|
+
with:
|
|
28
|
+
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
29
|
+
result-encoding: string
|
|
30
|
+
script: |
|
|
31
|
+
let version = "${{ github.event.release.tag_name }}"
|
|
32
|
+
if (!version) {
|
|
33
|
+
version = "${{ github.event.inputs.version }}"
|
|
34
|
+
}
|
|
35
|
+
|
|
36
|
+
if (!version) {
|
|
37
|
+
throw new Error("unable to find package build version")
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
return version
|
|
41
|
+
|
|
42
|
+
- id: get_url
|
|
43
|
+
name: Get release upload url
|
|
44
|
+
uses: actions/github-script@v3
|
|
45
|
+
with:
|
|
46
|
+
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
47
|
+
result-encoding: string
|
|
48
|
+
script: |
|
|
49
|
+
let uploadUrl = "${{ github.event.release.upload_url}}"
|
|
50
|
+
const tag = "${{ github.event.inputs.release_tag }}"
|
|
51
|
+
if (!uploadUrl && tag) {
|
|
52
|
+
const { data: release } = await github.repos.getReleaseByTag({
|
|
53
|
+
...context.repo,
|
|
54
|
+
tag
|
|
55
|
+
})
|
|
56
|
+
|
|
57
|
+
if (!release.upload_url) {
|
|
58
|
+
throw new Error("unable to find a release upload url")
|
|
59
|
+
}
|
|
60
|
+
|
|
61
|
+
uploadUrl = release.upload_url
|
|
62
|
+
}
|
|
63
|
+
|
|
64
|
+
return uploadUrl
|
|
65
|
+
|
|
66
|
+
- id: get_ref
|
|
67
|
+
name: Get checkout ref for custom build scripts
|
|
68
|
+
uses: actions/github-script@v3
|
|
69
|
+
with:
|
|
70
|
+
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
71
|
+
result-encoding: string
|
|
72
|
+
script: |
|
|
73
|
+
let ref = "${{ github.event.release.tag_name }}"
|
|
74
|
+
if (!ref) {
|
|
75
|
+
ref = "${{ github.event.ref }}".replace(/refs\/[^\/]+\//, '')
|
|
76
|
+
}
|
|
77
|
+
|
|
78
|
+
if (!ref) {
|
|
79
|
+
throw new Error("unable to find a ref for action")
|
|
80
|
+
}
|
|
81
|
+
|
|
82
|
+
return ref
|
|
83
|
+
|
|
84
|
+
package_linux:
|
|
85
|
+
needs: vars
|
|
86
|
+
runs-on: ubuntu-18.04
|
|
10
87
|
steps:
|
|
11
88
|
- uses: actions/checkout@v2
|
|
89
|
+
with:
|
|
90
|
+
# checkout at the ref for the action, separate from the target build version
|
|
91
|
+
# this allows running build scripts independent of the target version
|
|
92
|
+
ref: ${{needs.vars.outputs.ref}}
|
|
93
|
+
fetch-depth: 0
|
|
94
|
+
|
|
12
95
|
- name: Set up Ruby 2.6
|
|
13
|
-
uses:
|
|
96
|
+
uses: ruby/setup-ruby@v1
|
|
14
97
|
with:
|
|
15
|
-
ruby-version: 2.6
|
|
98
|
+
ruby-version: 2.6
|
|
16
99
|
|
|
17
100
|
- name: Build package
|
|
18
101
|
run: script/packages/linux
|
|
19
102
|
env:
|
|
20
|
-
VERSION: ${{
|
|
103
|
+
VERSION: ${{needs.vars.outputs.version}}
|
|
21
104
|
|
|
22
105
|
- uses: actions/upload-artifact@v2
|
|
23
106
|
with:
|
|
24
|
-
name: ${{
|
|
25
|
-
path: pkg/${{
|
|
107
|
+
name: ${{needs.vars.outputs.version}}-linux
|
|
108
|
+
path: pkg/${{needs.vars.outputs.version}}/licensed-${{needs.vars.outputs.version}}-linux-x64.tar.gz
|
|
26
109
|
|
|
27
110
|
package_mac:
|
|
111
|
+
needs: vars
|
|
28
112
|
runs-on: macOS-latest
|
|
29
113
|
steps:
|
|
30
114
|
- uses: actions/checkout@v2
|
|
115
|
+
with:
|
|
116
|
+
# checkout at the ref for the action, separate from the target build version
|
|
117
|
+
# this allows running build scripts independent of the target version
|
|
118
|
+
ref: ${{needs.vars.outputs.ref}}
|
|
119
|
+
fetch-depth: 0
|
|
120
|
+
|
|
31
121
|
- name: Set up Ruby 2.6
|
|
32
|
-
uses:
|
|
122
|
+
uses: ruby/setup-ruby@v1
|
|
33
123
|
with:
|
|
34
|
-
ruby-version: 2.6
|
|
124
|
+
ruby-version: 2.6
|
|
35
125
|
|
|
36
126
|
- name: Build package
|
|
37
127
|
run: script/packages/mac
|
|
38
128
|
env:
|
|
39
|
-
VERSION: ${{
|
|
129
|
+
VERSION: ${{needs.vars.outputs.version}}
|
|
40
130
|
|
|
41
131
|
- uses: actions/upload-artifact@v2
|
|
42
132
|
with:
|
|
43
|
-
name: ${{
|
|
44
|
-
path: pkg/${{
|
|
133
|
+
name: ${{needs.vars.outputs.version}}-darwin
|
|
134
|
+
path: pkg/${{needs.vars.outputs.version}}/licensed-${{needs.vars.outputs.version}}-darwin-x64.tar.gz
|
|
45
135
|
|
|
46
136
|
build_gem:
|
|
137
|
+
needs: vars
|
|
47
138
|
runs-on: ubuntu-latest
|
|
48
139
|
steps:
|
|
49
140
|
- uses: actions/checkout@v2
|
|
141
|
+
with:
|
|
142
|
+
# building a gem doesn't use a different ref from the version input
|
|
143
|
+
ref: ${{needs.vars.outputs.version}}
|
|
144
|
+
|
|
50
145
|
- name: Set up Ruby 2.6
|
|
51
|
-
uses:
|
|
146
|
+
uses: ruby/setup-ruby@v1
|
|
52
147
|
with:
|
|
53
|
-
ruby-version: 2.6
|
|
148
|
+
ruby-version: 2.6
|
|
54
149
|
|
|
55
150
|
- name: Build gem
|
|
56
|
-
run: gem build licensed.gemspec -o licensed-${{
|
|
151
|
+
run: gem build licensed.gemspec -o licensed-${{needs.vars.outputs.version}}.gem
|
|
57
152
|
|
|
58
153
|
- uses: actions/upload-artifact@v2
|
|
59
154
|
with:
|
|
60
|
-
name: ${{
|
|
61
|
-
path: licensed-${{
|
|
155
|
+
name: ${{needs.vars.outputs.version}}-gem
|
|
156
|
+
path: licensed-${{needs.vars.outputs.version}}.gem
|
|
62
157
|
|
|
63
158
|
upload_packages:
|
|
159
|
+
if: ${{ needs.vars.outputs.upload_url != '' }}
|
|
64
160
|
runs-on: ubuntu-latest
|
|
65
|
-
needs: [package_linux, package_mac, build_gem]
|
|
161
|
+
needs: [vars, package_linux, package_mac, build_gem]
|
|
66
162
|
|
|
67
163
|
steps:
|
|
68
164
|
- name: Set up Ruby 2.6
|
|
69
|
-
uses:
|
|
165
|
+
uses: ruby/setup-ruby@v1
|
|
70
166
|
with:
|
|
71
|
-
ruby-version: 2.6
|
|
167
|
+
ruby-version: 2.6
|
|
72
168
|
|
|
73
169
|
- name: Download linux package
|
|
74
170
|
uses: actions/download-artifact@v2
|
|
75
171
|
with:
|
|
76
|
-
name: ${{
|
|
172
|
+
name: ${{needs.vars.outputs.version}}-linux
|
|
77
173
|
|
|
78
174
|
- name: Download macOS package
|
|
79
175
|
uses: actions/download-artifact@v2
|
|
80
176
|
with:
|
|
81
|
-
name: ${{
|
|
177
|
+
name: ${{needs.vars.outputs.version}}-darwin
|
|
82
178
|
|
|
83
179
|
- name: Download gem
|
|
84
180
|
uses: actions/download-artifact@v2
|
|
85
181
|
with:
|
|
86
|
-
name: ${{
|
|
182
|
+
name: ${{needs.vars.outputs.version}}-gem
|
|
87
183
|
|
|
88
184
|
- name: Publish linux package
|
|
89
185
|
uses: actions/upload-release-asset@v1
|
|
90
186
|
env:
|
|
91
187
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
92
188
|
with:
|
|
93
|
-
upload_url: ${{
|
|
94
|
-
asset_path: ./licensed-${{
|
|
95
|
-
asset_name: licensed-${{
|
|
189
|
+
upload_url: ${{ needs.vars.outputs.upload_url }}
|
|
190
|
+
asset_path: ./licensed-${{needs.vars.outputs.version}}-linux-x64.tar.gz
|
|
191
|
+
asset_name: licensed-${{needs.vars.outputs.version}}-linux-x64.tar.gz
|
|
96
192
|
asset_content_type: application/gzip
|
|
97
193
|
|
|
98
194
|
- name: Publish mac package
|
|
@@ -100,9 +196,9 @@ jobs:
|
|
|
100
196
|
env:
|
|
101
197
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
102
198
|
with:
|
|
103
|
-
upload_url: ${{
|
|
104
|
-
asset_path: ./licensed-${{
|
|
105
|
-
asset_name: licensed-${{
|
|
199
|
+
upload_url: ${{ needs.vars.outputs.upload_url }}
|
|
200
|
+
asset_path: ./licensed-${{needs.vars.outputs.version}}-darwin-x64.tar.gz
|
|
201
|
+
asset_name: licensed-${{needs.vars.outputs.version}}-darwin-x64.tar.gz
|
|
106
202
|
asset_content_type: application/gzip
|
|
107
203
|
|
|
108
204
|
- name: Publish gem to RubyGems
|
|
@@ -114,4 +210,4 @@ jobs:
|
|
|
114
210
|
gem push $GEM
|
|
115
211
|
env:
|
|
116
212
|
RUBYGEMS_API_KEY: ${{secrets.RUBYGEMS_AUTH_TOKEN}}
|
|
117
|
-
GEM: licensed-${{
|
|
213
|
+
GEM: licensed-${{needs.vars.outputs.version}}.gem
|
data/.github/workflows/test.yml
CHANGED
|
@@ -8,15 +8,15 @@ jobs:
|
|
|
8
8
|
steps:
|
|
9
9
|
- uses: actions/checkout@v2
|
|
10
10
|
- name: Setup node
|
|
11
|
-
uses: actions/setup-node@
|
|
11
|
+
uses: actions/setup-node@v2
|
|
12
12
|
with:
|
|
13
13
|
node-version: 8
|
|
14
14
|
- name: Install Bower
|
|
15
15
|
run: npm install -g bower
|
|
16
16
|
- name: Set up Ruby
|
|
17
|
-
uses:
|
|
17
|
+
uses: ruby/setup-ruby@v1
|
|
18
18
|
with:
|
|
19
|
-
ruby-version: 2.6
|
|
19
|
+
ruby-version: 2.6
|
|
20
20
|
- run: bundle lock
|
|
21
21
|
- uses: actions/cache@v1
|
|
22
22
|
with:
|
|
@@ -37,9 +37,9 @@ jobs:
|
|
|
37
37
|
steps:
|
|
38
38
|
- uses: actions/checkout@v2
|
|
39
39
|
- name: Set up Ruby
|
|
40
|
-
uses:
|
|
40
|
+
uses: ruby/setup-ruby@v1
|
|
41
41
|
with:
|
|
42
|
-
ruby-version: 2.6
|
|
42
|
+
ruby-version: 2.6
|
|
43
43
|
- name: Set up Bundler
|
|
44
44
|
run: |
|
|
45
45
|
yes | gem uninstall bundler --all
|
|
@@ -60,16 +60,16 @@ jobs:
|
|
|
60
60
|
runs-on: ubuntu-latest
|
|
61
61
|
strategy:
|
|
62
62
|
matrix:
|
|
63
|
-
ghc: [ '8.2
|
|
64
|
-
cabal: [ '2.
|
|
63
|
+
ghc: [ '8.2', '8.6', '8.8', '8.10' ]
|
|
64
|
+
cabal: [ '2.4', '3.0', '3.2' ]
|
|
65
65
|
steps:
|
|
66
66
|
- uses: actions/checkout@v2
|
|
67
67
|
- name: Set up Ruby
|
|
68
|
-
uses:
|
|
68
|
+
uses: ruby/setup-ruby@v1
|
|
69
69
|
with:
|
|
70
|
-
ruby-version: 2.6
|
|
70
|
+
ruby-version: 2.6
|
|
71
71
|
- name: Setup Haskell
|
|
72
|
-
uses: actions/setup
|
|
72
|
+
uses: haskell/actions/setup@v1
|
|
73
73
|
with:
|
|
74
74
|
ghc-version: ${{ matrix.ghc }}
|
|
75
75
|
cabal-version: ${{ matrix.cabal }}
|
|
@@ -89,17 +89,17 @@ jobs:
|
|
|
89
89
|
runs-on: ubuntu-latest
|
|
90
90
|
strategy:
|
|
91
91
|
matrix:
|
|
92
|
-
php: [ '
|
|
92
|
+
php: [ '7.3', '7.4' ]
|
|
93
93
|
steps:
|
|
94
94
|
- uses: actions/checkout@v2
|
|
95
95
|
- name: Setup php
|
|
96
|
-
uses: nanasess/setup-php@v3.0.
|
|
96
|
+
uses: nanasess/setup-php@v3.0.6
|
|
97
97
|
with:
|
|
98
98
|
php-version: ${{ matrix.php }}
|
|
99
99
|
- name: Set up Ruby
|
|
100
|
-
uses:
|
|
100
|
+
uses: ruby/setup-ruby@v1
|
|
101
101
|
with:
|
|
102
|
-
ruby-version: 2.6
|
|
102
|
+
ruby-version: 2.6
|
|
103
103
|
- run: bundle lock
|
|
104
104
|
- uses: actions/cache@v1
|
|
105
105
|
with:
|
|
@@ -116,11 +116,11 @@ jobs:
|
|
|
116
116
|
runs-on: ubuntu-latest
|
|
117
117
|
strategy:
|
|
118
118
|
matrix:
|
|
119
|
-
ruby: [ 2.
|
|
119
|
+
ruby: [ 2.5, 2.6, 2.7 ]
|
|
120
120
|
steps:
|
|
121
121
|
- uses: actions/checkout@v2
|
|
122
122
|
- name: Set up Ruby
|
|
123
|
-
uses:
|
|
123
|
+
uses: ruby/setup-ruby@v1
|
|
124
124
|
with:
|
|
125
125
|
ruby-version: ${{matrix.ruby}}
|
|
126
126
|
- name: Set up Bundler
|
|
@@ -146,9 +146,9 @@ jobs:
|
|
|
146
146
|
with:
|
|
147
147
|
go-version: 1.10.x
|
|
148
148
|
- name: Set up Ruby
|
|
149
|
-
uses:
|
|
149
|
+
uses: ruby/setup-ruby@v1
|
|
150
150
|
with:
|
|
151
|
-
ruby-version: 2.6
|
|
151
|
+
ruby-version: 2.6
|
|
152
152
|
- run: bundle lock
|
|
153
153
|
- uses: actions/cache@v1
|
|
154
154
|
with:
|
|
@@ -173,9 +173,9 @@ jobs:
|
|
|
173
173
|
with:
|
|
174
174
|
go-version: ${{ matrix.go }}
|
|
175
175
|
- name: Set up Ruby
|
|
176
|
-
uses:
|
|
176
|
+
uses: ruby/setup-ruby@v1
|
|
177
177
|
with:
|
|
178
|
-
ruby-version: 2.6
|
|
178
|
+
ruby-version: 2.6
|
|
179
179
|
- run: bundle lock
|
|
180
180
|
- uses: actions/cache@v1
|
|
181
181
|
with:
|
|
@@ -193,9 +193,9 @@ jobs:
|
|
|
193
193
|
steps:
|
|
194
194
|
- uses: actions/checkout@v2
|
|
195
195
|
- name: Set up Ruby
|
|
196
|
-
uses:
|
|
196
|
+
uses: ruby/setup-ruby@v1
|
|
197
197
|
with:
|
|
198
|
-
ruby-version: 2.6
|
|
198
|
+
ruby-version: 2.6
|
|
199
199
|
- run: bundle lock
|
|
200
200
|
- uses: actions/cache@v1
|
|
201
201
|
with:
|
|
@@ -213,9 +213,9 @@ jobs:
|
|
|
213
213
|
steps:
|
|
214
214
|
- uses: actions/checkout@v2
|
|
215
215
|
- name: Set up Ruby
|
|
216
|
-
uses:
|
|
216
|
+
uses: ruby/setup-ruby@v1
|
|
217
217
|
with:
|
|
218
|
-
ruby-version: 2.6
|
|
218
|
+
ruby-version: 2.6
|
|
219
219
|
- run: bundle lock
|
|
220
220
|
- uses: actions/cache@v1
|
|
221
221
|
with:
|
|
@@ -230,18 +230,18 @@ jobs:
|
|
|
230
230
|
runs-on: ubuntu-latest
|
|
231
231
|
strategy:
|
|
232
232
|
matrix:
|
|
233
|
-
otp: [21.x, 22.x]
|
|
234
|
-
elixir: [1.
|
|
233
|
+
otp: [21.x, 22.x, 23.x]
|
|
234
|
+
elixir: [ 1.10.x, 1.11.x ]
|
|
235
235
|
steps:
|
|
236
236
|
- uses: actions/checkout@v2
|
|
237
|
-
- uses:
|
|
237
|
+
- uses: erlef/setup-elixir@v1.6.0
|
|
238
238
|
with:
|
|
239
239
|
otp-version: ${{matrix.otp}}
|
|
240
240
|
elixir-version: ${{matrix.elixir}}
|
|
241
241
|
- name: Set up Ruby
|
|
242
|
-
uses:
|
|
242
|
+
uses: ruby/setup-ruby@v1
|
|
243
243
|
with:
|
|
244
|
-
ruby-version: 2.6
|
|
244
|
+
ruby-version: 2.6
|
|
245
245
|
- run: bundle lock
|
|
246
246
|
- uses: actions/cache@v1
|
|
247
247
|
with:
|
|
@@ -258,17 +258,17 @@ jobs:
|
|
|
258
258
|
runs-on: ubuntu-latest
|
|
259
259
|
strategy:
|
|
260
260
|
matrix:
|
|
261
|
-
node_version: [
|
|
261
|
+
node_version: [ 10, 12, 14, 15 ]
|
|
262
262
|
steps:
|
|
263
263
|
- uses: actions/checkout@v2
|
|
264
264
|
- name: Setup node
|
|
265
|
-
uses: actions/setup-node@
|
|
265
|
+
uses: actions/setup-node@v2
|
|
266
266
|
with:
|
|
267
267
|
node-version: ${{ matrix.node_version }}
|
|
268
268
|
- name: Set up Ruby
|
|
269
|
-
uses:
|
|
269
|
+
uses: ruby/setup-ruby@v1
|
|
270
270
|
with:
|
|
271
|
-
ruby-version: 2.6
|
|
271
|
+
ruby-version: 2.6
|
|
272
272
|
- run: bundle lock
|
|
273
273
|
- uses: actions/cache@v1
|
|
274
274
|
with:
|
|
@@ -290,9 +290,9 @@ jobs:
|
|
|
290
290
|
with:
|
|
291
291
|
dotnet-version: 3.1.202
|
|
292
292
|
- name: Set up Ruby
|
|
293
|
-
uses:
|
|
293
|
+
uses: ruby/setup-ruby@v1
|
|
294
294
|
with:
|
|
295
|
-
ruby-version: 2.6
|
|
295
|
+
ruby-version: 2.6
|
|
296
296
|
- run: bundle lock
|
|
297
297
|
- uses: actions/cache@v1
|
|
298
298
|
with:
|
|
@@ -318,9 +318,9 @@ jobs:
|
|
|
318
318
|
python-version: ${{ matrix.python }}
|
|
319
319
|
architecture: x64
|
|
320
320
|
- name: Set up Ruby
|
|
321
|
-
uses:
|
|
321
|
+
uses: ruby/setup-ruby@v1
|
|
322
322
|
with:
|
|
323
|
-
ruby-version: 2.6
|
|
323
|
+
ruby-version: 2.6
|
|
324
324
|
- run: bundle lock
|
|
325
325
|
- uses: actions/cache@v1
|
|
326
326
|
with:
|
|
@@ -345,9 +345,9 @@ jobs:
|
|
|
345
345
|
python-version: '3.x'
|
|
346
346
|
architecture: x64
|
|
347
347
|
- name: Set up Ruby
|
|
348
|
-
uses:
|
|
348
|
+
uses: ruby/setup-ruby@v1
|
|
349
349
|
with:
|
|
350
|
-
ruby-version: 2.6
|
|
350
|
+
ruby-version: 2.6
|
|
351
351
|
- run: bundle lock
|
|
352
352
|
- uses: actions/cache@v1
|
|
353
353
|
with:
|
|
@@ -371,7 +371,7 @@ jobs:
|
|
|
371
371
|
steps:
|
|
372
372
|
- uses: actions/checkout@v2
|
|
373
373
|
- name: Setup node
|
|
374
|
-
uses: actions/setup-node@
|
|
374
|
+
uses: actions/setup-node@v2
|
|
375
375
|
with:
|
|
376
376
|
node-version: 12
|
|
377
377
|
- name: Install Yarn
|
|
@@ -379,9 +379,9 @@ jobs:
|
|
|
379
379
|
env:
|
|
380
380
|
YARN_VERSION: ${{ matrix.yarn_version }}
|
|
381
381
|
- name: Set up Ruby
|
|
382
|
-
uses:
|
|
382
|
+
uses: ruby/setup-ruby@v1
|
|
383
383
|
with:
|
|
384
|
-
ruby-version: 2.6
|
|
384
|
+
ruby-version: 2.6
|
|
385
385
|
- run: bundle lock
|
|
386
386
|
- uses: actions/cache@v1
|
|
387
387
|
with:
|
data/.gitignore
CHANGED
data/CHANGELOG.md
CHANGED
|
@@ -6,10 +6,48 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
6
6
|
|
|
7
7
|
## [Unreleased]
|
|
8
8
|
|
|
9
|
+
## 2.15.2
|
|
10
|
+
|
|
11
|
+
2021-04-06
|
|
12
|
+
|
|
13
|
+
### Fixed
|
|
14
|
+
|
|
15
|
+
- The pip source works with package names containing periods (:tada: @bcskda https://github.com/github/licensed/pull/350)
|
|
16
|
+
|
|
17
|
+
## 2.15.1
|
|
18
|
+
|
|
19
|
+
2021-03-29
|
|
20
|
+
|
|
21
|
+
### Changed
|
|
22
|
+
|
|
23
|
+
- The npm source will ignore dependencies that are marked as both extraneous and missing (https://github.com/github/licensed/pull/347)
|
|
24
|
+
|
|
25
|
+
## 2.15.0
|
|
26
|
+
2021-03-24
|
|
27
|
+
|
|
28
|
+
### Added
|
|
29
|
+
- Support for npm 7 (https://github.com/github/licensed/pull/341)
|
|
30
|
+
|
|
31
|
+
### Fixed
|
|
32
|
+
- Files in the manifest source will be found correctly for apps that are not at the repository root (https://github.com/github/licensed/pull/345)
|
|
33
|
+
|
|
34
|
+
## 2.14.4
|
|
35
|
+
2021-02-09
|
|
36
|
+
|
|
37
|
+
### Added
|
|
38
|
+
- `list` and `cache` commands optionally print output in JSON or YML formats using the `--format/-f` flag (https://github.com/github/licensed/pull/334)
|
|
39
|
+
- `list` command will include detected license keys using the `--licenses/-l` flag (https://github.com/github/licensed/pull/334)
|
|
40
|
+
|
|
41
|
+
## 2.14.3
|
|
42
|
+
2020-12-11
|
|
43
|
+
|
|
44
|
+
### Fixed
|
|
45
|
+
- Auto-generating license text for a known license will no longer raise an error if the found license has no text (:tada: @Eun https://github.com/github/licensed/pull/328)
|
|
46
|
+
|
|
9
47
|
## 2.14.2
|
|
10
48
|
2020-11-20
|
|
11
49
|
|
|
12
|
-
|
|
50
|
+
### Fixed
|
|
13
51
|
- Yarn source correctly finds dependency paths on disk (https://github.com/github/licensed/pull/326)
|
|
14
52
|
- Go source better handles finding dependencies that have been vendored (https://github.com/github/licensed/pull/323)
|
|
15
53
|
|
|
@@ -373,4 +411,4 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
|
373
411
|
|
|
374
412
|
Initial release :tada:
|
|
375
413
|
|
|
376
|
-
[Unreleased]: https://github.com/github/licensed/compare/2.
|
|
414
|
+
[Unreleased]: https://github.com/github/licensed/compare/2.15.2...HEAD
|
data/README.md
CHANGED
|
@@ -110,7 +110,7 @@ Dependencies will be automatically detected for all of the following sources by
|
|
|
110
110
|
1. [Gradle](./docs/sources/gradle.md)
|
|
111
111
|
1. [Manifest lists (manifests)](./docs/sources/manifests.md)
|
|
112
112
|
1. [Mix](./docs/sources/mix.md)
|
|
113
|
-
1. [
|
|
113
|
+
1. [npm](./docs/sources/npm.md)
|
|
114
114
|
1. [NuGet](./docs/sources/nuget.md)
|
|
115
115
|
1. [Pip](./docs/sources/pip.md)
|
|
116
116
|
1. [Pipenv](./docs/sources/pipenv.md)
|
data/docs/sources/npm.md
CHANGED
data/lib/licensed/cli.rb
CHANGED
|
@@ -12,9 +12,11 @@ module Licensed
|
|
|
12
12
|
desc: "Path to licensed configuration file"
|
|
13
13
|
method_option :sources, aliases: "-s", type: :array,
|
|
14
14
|
desc: "Individual source(s) to evaluate. Must also be enabled via configuration."
|
|
15
|
+
method_option :format, aliases: "-f", enum: ["yaml", "json"],
|
|
16
|
+
desc: "Output format"
|
|
15
17
|
def cache
|
|
16
18
|
run Licensed::Commands::Cache.new(config: config),
|
|
17
|
-
force: options[:force], sources: options[:sources]
|
|
19
|
+
force: options[:force], sources: options[:sources], reporter: options[:format]
|
|
18
20
|
end
|
|
19
21
|
|
|
20
22
|
desc "status", "Check status of dependencies' cached licenses"
|
|
@@ -33,8 +35,12 @@ module Licensed
|
|
|
33
35
|
desc: "Path to licensed configuration file"
|
|
34
36
|
method_option :sources, aliases: "-s", type: :array,
|
|
35
37
|
desc: "Individual source(s) to evaluate. Must also be enabled via configuration."
|
|
38
|
+
method_option :format, aliases: "-f", enum: ["yaml", "json"],
|
|
39
|
+
desc: "Output format"
|
|
40
|
+
method_option :licenses, aliases: "-l", type: :boolean,
|
|
41
|
+
desc: "Include detected licenses in output"
|
|
36
42
|
def list
|
|
37
|
-
run Licensed::Commands::List.new(config: config), sources: options[:sources]
|
|
43
|
+
run Licensed::Commands::List.new(config: config), sources: options[:sources], reporter: options[:format], licenses: options[:licenses]
|
|
38
44
|
end
|
|
39
45
|
|
|
40
46
|
desc "notices", "Generate a NOTICE file from cached records"
|
|
@@ -41,6 +41,13 @@ module Licensed
|
|
|
41
41
|
#
|
|
42
42
|
# Returns true.
|
|
43
43
|
def evaluate_dependency(app, source, dependency, report)
|
|
44
|
+
report["dependency"] = dependency.name
|
|
45
|
+
report["version"] = dependency.version
|
|
46
|
+
|
|
47
|
+
if options[:licenses]
|
|
48
|
+
report["license"] = dependency.license_key
|
|
49
|
+
end
|
|
50
|
+
|
|
44
51
|
true
|
|
45
52
|
end
|
|
46
53
|
end
|
data/lib/licensed/dependency.rb
CHANGED
|
@@ -142,6 +142,7 @@ module Licensed
|
|
|
142
142
|
def generated_license_contents
|
|
143
143
|
return unless license
|
|
144
144
|
return if license.key == "other"
|
|
145
|
+
return if license.text.nil?
|
|
145
146
|
|
|
146
147
|
# strip copyright clauses and any extra newlines
|
|
147
148
|
# many package managers don't provide enough information to
|
|
@@ -75,7 +75,9 @@ module Licensed
|
|
|
75
75
|
def report_dependency(dependency)
|
|
76
76
|
super do |report|
|
|
77
77
|
result = yield report
|
|
78
|
-
|
|
78
|
+
info = "#{dependency.name} (#{dependency.version})"
|
|
79
|
+
info = "#{info}: #{report["license"]}" if report["license"]
|
|
80
|
+
shell.info " #{info}"
|
|
79
81
|
|
|
80
82
|
result
|
|
81
83
|
end
|
|
@@ -222,14 +222,25 @@ module Licensed
|
|
|
222
222
|
|
|
223
223
|
# Returns a package info structure with an error set
|
|
224
224
|
def missing_package(id)
|
|
225
|
-
name,
|
|
226
|
-
id.rpartition("-") # e.g. to match the right-most dash from ipid fused-effects-1.0.0.0
|
|
227
|
-
else
|
|
228
|
-
id.partition(/\s/) # e.g. to match the left-most space from constraint fused-effects > 1.0.0.0
|
|
229
|
-
end
|
|
230
|
-
|
|
225
|
+
name, version = package_id_name_version(id)
|
|
231
226
|
{ "name" => name, "version" => version, "error" => "package not found" }
|
|
232
227
|
end
|
|
228
|
+
|
|
229
|
+
# Parses the name and version pieces from an id or package requirement string
|
|
230
|
+
def package_id_name_version(id)
|
|
231
|
+
name, version = id.split(" ", 2)
|
|
232
|
+
return [name, version] if version
|
|
233
|
+
|
|
234
|
+
# split by dashes, find the rightmost thing that looks like an
|
|
235
|
+
parts = id.split("-")
|
|
236
|
+
version_start_index = parts.rindex { |part| part.match?(/^[\d\.]+$/) }
|
|
237
|
+
return [id, nil] if version_start_index.nil?
|
|
238
|
+
|
|
239
|
+
[
|
|
240
|
+
parts[0...version_start_index].join("-"),
|
|
241
|
+
parts[version_start_index..-1].join("-")
|
|
242
|
+
]
|
|
243
|
+
end
|
|
233
244
|
end
|
|
234
245
|
end
|
|
235
246
|
end
|
|
@@ -170,7 +170,7 @@ module Licensed
|
|
|
170
170
|
def all_files
|
|
171
171
|
# remove files if they are tracked but don't exist on the file system
|
|
172
172
|
@all_files ||= Set.new(Licensed::Git.files || [])
|
|
173
|
-
.delete_if { |f| !File.exist?(f) }
|
|
173
|
+
.delete_if { |f| !File.exist?(File.join(Licensed::Git.repository_root, f)) }
|
|
174
174
|
end
|
|
175
175
|
|
|
176
176
|
class Dependency < Licensed::Dependency
|
data/lib/licensed/sources/npm.rb
CHANGED
|
@@ -4,6 +4,25 @@ require "json"
|
|
|
4
4
|
module Licensed
|
|
5
5
|
module Sources
|
|
6
6
|
class NPM < Source
|
|
7
|
+
class Dependency < ::Licensed::Dependency
|
|
8
|
+
# override license_metadata to pull homepage and summary information
|
|
9
|
+
# from a packages package.json file, if it exists
|
|
10
|
+
# this accounts for the lack of this information in npm 7's `npm list` output
|
|
11
|
+
def license_metadata
|
|
12
|
+
data = super
|
|
13
|
+
return data if !data["homepage"].to_s.empty? && !data["summary"].to_s.empty?
|
|
14
|
+
|
|
15
|
+
package_json_path = File.join(path, "package.json")
|
|
16
|
+
return data unless File.exist?(package_json_path)
|
|
17
|
+
|
|
18
|
+
package_json = JSON.parse(File.read(package_json_path))
|
|
19
|
+
data["homepage"] = package_json["homepage"]
|
|
20
|
+
data["summary"] = package_json["description"]
|
|
21
|
+
|
|
22
|
+
data
|
|
23
|
+
end
|
|
24
|
+
end
|
|
25
|
+
|
|
7
26
|
def self.type
|
|
8
27
|
"npm"
|
|
9
28
|
end
|
|
@@ -50,6 +69,9 @@ module Licensed
|
|
|
50
69
|
dependencies.each do |name, dependency|
|
|
51
70
|
next if dependency["peerMissing"]
|
|
52
71
|
next if yarn_lock_present && dependency["missing"]
|
|
72
|
+
next if dependency["extraneous"] && dependency["missing"]
|
|
73
|
+
|
|
74
|
+
dependency["name"] = name
|
|
53
75
|
(result[name] ||= []) << dependency
|
|
54
76
|
recursive_dependencies(dependency["dependencies"] || {}, result)
|
|
55
77
|
end
|
|
@@ -59,22 +81,50 @@ module Licensed
|
|
|
59
81
|
# Returns parsed package metadata returned from `npm list`
|
|
60
82
|
def package_metadata
|
|
61
83
|
return @package_metadata if defined?(@package_metadata)
|
|
84
|
+
@package_metadata = JSON.parse(package_metadata_command)
|
|
85
|
+
rescue JSON::ParserError => e
|
|
86
|
+
message = "Licensed was unable to parse the output from 'npm list'. JSON Error: #{e.message}"
|
|
87
|
+
npm_error = package_metadata_error
|
|
88
|
+
message = "#{message}. npm Error: #{npm_error}" if npm_error
|
|
89
|
+
raise Licensed::Sources::Source::Error, message
|
|
90
|
+
end
|
|
62
91
|
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
92
|
+
# Returns an error, if one exists, from running `npm list` to get package metadata
|
|
93
|
+
def package_metadata_error
|
|
94
|
+
Licensed::Shell.execute("npm", "list", *package_metadata_args)
|
|
95
|
+
return ""
|
|
96
|
+
rescue Licensed::Shell::Error => e
|
|
97
|
+
return e.message
|
|
69
98
|
end
|
|
70
99
|
|
|
71
100
|
# Returns the output from running `npm list` to get package metadata
|
|
72
101
|
def package_metadata_command
|
|
73
102
|
args = %w(--json --long)
|
|
74
|
-
args
|
|
103
|
+
args.concat(package_metadata_args)
|
|
104
|
+
|
|
75
105
|
Licensed::Shell.execute("npm", "list", *args, allow_failure: true)
|
|
76
106
|
end
|
|
77
107
|
|
|
108
|
+
# Returns an array of arguments that should be used for all `npm list`
|
|
109
|
+
# calls, regardless of how the output is formatted
|
|
110
|
+
def package_metadata_args
|
|
111
|
+
args = []
|
|
112
|
+
args << "--production" unless include_non_production?
|
|
113
|
+
|
|
114
|
+
# on npm 7+, the --all argument is necessary to evaluate the project's
|
|
115
|
+
# full dependency tree
|
|
116
|
+
args << "--all" if npm_version >= Gem::Version.new("7.0.0")
|
|
117
|
+
|
|
118
|
+
return args
|
|
119
|
+
end
|
|
120
|
+
|
|
121
|
+
# Returns the currently installed version of npm as a Gem::Version object
|
|
122
|
+
def npm_version
|
|
123
|
+
@npm_version ||= begin
|
|
124
|
+
Gem::Version.new(Licensed::Shell.execute("npm", "-v").strip)
|
|
125
|
+
end
|
|
126
|
+
end
|
|
127
|
+
|
|
78
128
|
# Returns true if a yarn.lock file exists in the current directory
|
|
79
129
|
def yarn_lock_present
|
|
80
130
|
@yarn_lock_present ||= File.exist?(config.pwd.join("yarn.lock"))
|
data/lib/licensed/sources/pip.rb
CHANGED
|
@@ -8,7 +8,7 @@ module Licensed
|
|
|
8
8
|
module Sources
|
|
9
9
|
class Pip < Source
|
|
10
10
|
VERSION_OPERATORS = %w(< > <= >= == !=).freeze
|
|
11
|
-
PACKAGE_REGEX = /^([\w
|
|
11
|
+
PACKAGE_REGEX = /^([\w\.-]+)(#{VERSION_OPERATORS.join("|")})?/
|
|
12
12
|
|
|
13
13
|
def enabled?
|
|
14
14
|
return unless virtual_env_pip && Licensed::Shell.tool_available?(virtual_env_pip)
|
data/lib/licensed/version.rb
CHANGED
data/script/packages/build
CHANGED
|
@@ -51,8 +51,11 @@ cd $COPY_DIR
|
|
|
51
51
|
trap "git checkout $CURRENT_BRANCH" EXIT
|
|
52
52
|
fi
|
|
53
53
|
|
|
54
|
+
# get the openssl dir to use when building based on ruby's default ssl cert dir
|
|
55
|
+
OPENSSL_DIR="$(cd "$(ruby -e 'require "net/https"; puts OpenSSL::X509::DEFAULT_CERT_DIR')/.." && pwd)"
|
|
56
|
+
|
|
54
57
|
# build the licensed rubyc executable
|
|
55
|
-
"$RUBYC" --clean-tmpdir -o "$BUILD_DIR/licensed" "$COPY_DIR/exe/licensed"
|
|
58
|
+
"$RUBYC" --openssl-dir "$OPENSSL_DIR" --clean-tmpdir -o "$BUILD_DIR/licensed" "$COPY_DIR/exe/licensed"
|
|
56
59
|
chmod +x $BUILD_DIR/licensed
|
|
57
60
|
)
|
|
58
61
|
|
data/script/packages/linux
CHANGED
|
@@ -34,6 +34,9 @@ build_linux_local() {
|
|
|
34
34
|
sudo apt-get update
|
|
35
35
|
sudo apt-get install -y --no-install-recommends cmake make gcc pkg-config squashfs-tools curl bison git rsync
|
|
36
36
|
|
|
37
|
+
sudo gem update --system
|
|
38
|
+
sudo gem update bundler
|
|
39
|
+
|
|
37
40
|
RUBYC="$BASE_DIR/bin/rubyc-linux"
|
|
38
41
|
if [ ! -f "$RUBYC" ]; then
|
|
39
42
|
mkdir -p "$(dirname "$RUBYC")"
|
|
@@ -42,6 +45,7 @@ build_linux_local() {
|
|
|
42
45
|
fi
|
|
43
46
|
|
|
44
47
|
export CPPFLAGS="-P"
|
|
48
|
+
export SSL_CERT_DIR="/etc/ssl/certs"
|
|
45
49
|
export RUBYC
|
|
46
50
|
"$BASE_DIR"/script/packages/build
|
|
47
51
|
}
|
data/script/packages/mac
CHANGED
|
@@ -28,6 +28,9 @@ brew update
|
|
|
28
28
|
brew list "squashfs" &>/dev/null || brew install "squashfs"
|
|
29
29
|
brew list "pkg-config" &>/dev/null || brew install "pkg-config"
|
|
30
30
|
|
|
31
|
+
gem update --system
|
|
32
|
+
gem update bundler
|
|
33
|
+
|
|
31
34
|
if [ ! -f "$RUBYC" ]; then
|
|
32
35
|
mkdir -p "$(dirname "$RUBYC")"
|
|
33
36
|
curl -L https://github.com/kontena/ruby-packer/releases/download/2.6.0-0.6.0/rubyc-2.6.0-0.6.0-osx-amd64.gz | gunzip > "$RUBYC"
|
data/script/source-setup/npm
CHANGED
|
@@ -10,8 +10,25 @@ fi
|
|
|
10
10
|
BASE_PATH="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
|
11
11
|
cd $BASE_PATH/test/fixtures/npm
|
|
12
12
|
|
|
13
|
+
FORCE=""
|
|
13
14
|
if [ "$1" == "-f" ]; then
|
|
14
|
-
|
|
15
|
+
FORCE=1
|
|
16
|
+
fi
|
|
17
|
+
|
|
18
|
+
NPM_MAJOR_VERSION="$(npm -v | cut -d'.' -f1)"
|
|
19
|
+
if [ "$NPM_MAJOR_VERSION" -ge "7" ]; then
|
|
20
|
+
PACKAGE_JSON_SRC="package.json.npm7"
|
|
21
|
+
else
|
|
22
|
+
PACKAGE_JSON_SRC="package.json.npm6"
|
|
23
|
+
fi
|
|
24
|
+
|
|
25
|
+
if [ ! -f "package.json" ] || [ "$(cat package.json | md5sum )" != "$(cat "$PACKAGE_JSON_SRC" | md5sum)" ]; then
|
|
26
|
+
FORCE=1
|
|
27
|
+
cp -f "$PACKAGE_JSON_SRC" package.json
|
|
28
|
+
fi
|
|
29
|
+
|
|
30
|
+
if [ -n "$FORCE" ]; then
|
|
31
|
+
find . -not -regex "\.*" -and -not -name "package\.json*" -print0 | xargs -0 rm -rf
|
|
15
32
|
fi
|
|
16
33
|
|
|
17
34
|
npm install
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: licensed
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.
|
|
4
|
+
version: 2.15.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- GitHub
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: exe
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2021-04-06 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: licensee
|
|
@@ -348,7 +348,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
348
348
|
- !ruby/object:Gem::Version
|
|
349
349
|
version: '0'
|
|
350
350
|
requirements: []
|
|
351
|
-
rubygems_version: 3.0.3
|
|
351
|
+
rubygems_version: 3.0.3.1
|
|
352
352
|
signing_key:
|
|
353
353
|
specification_version: 4
|
|
354
354
|
summary: Extract and validate the licenses of dependencies.
|