spandx 0.18.2 → 0.19.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +11 -2
- data/lib/spandx/cli/printers/table.rb +1 -0
- data/lib/spandx/core/gateway.rb +6 -0
- data/lib/spandx/core/license_plugin.rb +1 -0
- data/lib/spandx/core/registerable.rb +1 -0
- data/lib/spandx/dotnet/nuget_gateway.rb +0 -6
- data/lib/spandx/java/gateway.rb +0 -6
- data/lib/spandx/js/yarn_lock.rb +1 -1
- data/lib/spandx/js/yarn_pkg.rb +0 -5
- data/lib/spandx/php/packagist_gateway.rb +0 -6
- data/lib/spandx/python/pypi.rb +2 -4
- data/lib/spandx/ruby/gateway.rb +1 -7
- data/lib/spandx/ruby/parsers/gemfile_lock.rb +1 -1
- data/lib/spandx/spdx/catalogue.rb +2 -1
- data/lib/spandx/terraform/parsers/lock_file.rb +1 -0
- data/lib/spandx/version.rb +1 -1
- data/lib/spandx.rb +1 -1
- data/spandx.gemspec +22 -20
- metadata +69 -44
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6c44e1c8ed07309ed992615ac0b497265dc552cb1fab37253fd22bfe1c176fe7
|
4
|
+
data.tar.gz: 5932840f867f2e800e81a1e75058a02d9a97ebf2e52a0bfda6ab2e471326d459
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ebe65576f1ccf3791355c3587aae8ba486aec797e80613b8f0a8e37882c6f54dd371c0d7c981d6f50d24696321332cf01fc3b8e262edcd11555da77b60a481b6
|
7
|
+
data.tar.gz: c1b63a3f9662788be70af6af3aef94987548da3caba5c043ddfb9f6923e39384e3af009190f1c9175693165f58ff740690146979e84bb22ab0f255e690d28faa
|
data/CHANGELOG.md
CHANGED
@@ -1,4 +1,4 @@
|
|
1
|
-
Version 0.
|
1
|
+
Version 0.19.0
|
2
2
|
|
3
3
|
# Changelog
|
4
4
|
|
@@ -9,6 +9,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
9
9
|
|
10
10
|
## [Unreleased]
|
11
11
|
|
12
|
+
## [0.19.0] - 2024-12-31
|
13
|
+
### Changed
|
14
|
+
- Upgrade to Ruby 3.2+
|
15
|
+
|
16
|
+
## [0.18.3] - 2021-12-15
|
17
|
+
- fix(spdx): fallback to online catalogue when local catalogue is not available.
|
18
|
+
|
12
19
|
## [0.18.2] - 2021-06-05
|
13
20
|
### Fixed
|
14
21
|
- fix(dpkg): detect package manager for related dependencies
|
@@ -237,7 +244,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
237
244
|
### Added
|
238
245
|
- Provide ruby API to the latest SPDX catalogue.
|
239
246
|
|
240
|
-
[Unreleased]: https://github.com/spandx/spandx/compare/v0.
|
247
|
+
[Unreleased]: https://github.com/spandx/spandx/compare/v0.19.0...HEAD
|
248
|
+
[0.19.0]: https://github.com/spandx/spandx/compare/v0.18.3...v0.19.0
|
249
|
+
[0.18.3]: https://github.com/spandx/spandx/compare/v0.18.2...v0.18.3
|
241
250
|
[0.18.2]: https://github.com/spandx/spandx/compare/v0.18.1...v0.18.2
|
242
251
|
[0.18.1]: https://github.com/spandx/spandx/compare/v0.18.0...v0.18.1
|
243
252
|
[0.18.0]: https://github.com/spandx/spandx/compare/v0.17.0...v0.18.0
|
data/lib/spandx/core/gateway.rb
CHANGED
@@ -6,10 +6,6 @@ module Spandx
|
|
6
6
|
# https://api.nuget.org/v3-flatcontainer/#{package.name}/index.json
|
7
7
|
# https://docs.microsoft.com/en-us/nuget/api/package-base-address-resource
|
8
8
|
class NugetGateway < ::Spandx::Core::Gateway
|
9
|
-
def initialize(http: Spandx.http)
|
10
|
-
@http = http
|
11
|
-
end
|
12
|
-
|
13
9
|
def licenses_for(dependency)
|
14
10
|
extract_licenses_from(nuspec_for(dependency.name, dependency.version))
|
15
11
|
end
|
@@ -28,8 +24,6 @@ module Spandx
|
|
28
24
|
|
29
25
|
private
|
30
26
|
|
31
|
-
attr_reader :http
|
32
|
-
|
33
27
|
def each_page(start_page:)
|
34
28
|
url = 'https://api.nuget.org/v3/catalog0/index.json'
|
35
29
|
items_from(fetch_json(url))
|
data/lib/spandx/java/gateway.rb
CHANGED
@@ -5,12 +5,6 @@ module Spandx
|
|
5
5
|
class Gateway < ::Spandx::Core::Gateway
|
6
6
|
DEFAULT_SOURCE = 'https://repo.maven.apache.org/maven2'
|
7
7
|
|
8
|
-
attr_reader :http
|
9
|
-
|
10
|
-
def initialize(http: Spandx.http)
|
11
|
-
@http = http
|
12
|
-
end
|
13
|
-
|
14
8
|
def matches?(dependency)
|
15
9
|
dependency.package_manager == :maven
|
16
10
|
end
|
data/lib/spandx/js/yarn_lock.rb
CHANGED
@@ -5,7 +5,7 @@ module Spandx
|
|
5
5
|
class YarnLock
|
6
6
|
include Enumerable
|
7
7
|
|
8
|
-
START_OF_DEPENDENCY_REGEX = %r{^"?(?<name>(
|
8
|
+
START_OF_DEPENDENCY_REGEX = %r{^"?(?<name>(?<item>@|\w|-|\.|/)+)@}i.freeze
|
9
9
|
INJECT_COLON = /(?<=\w|")\s(?=\w|")/.freeze
|
10
10
|
|
11
11
|
attr_reader :file_path
|
data/lib/spandx/js/yarn_pkg.rb
CHANGED
@@ -4,11 +4,6 @@ module Spandx
|
|
4
4
|
module Js
|
5
5
|
class YarnPkg < ::Spandx::Core::Gateway
|
6
6
|
DEFAULT_SOURCE = 'https://registry.yarnpkg.com'
|
7
|
-
attr_reader :http
|
8
|
-
|
9
|
-
def initialize(http: Spandx.http)
|
10
|
-
@http = http
|
11
|
-
end
|
12
7
|
|
13
8
|
def matches?(dependency)
|
14
9
|
%i[npm yarn].include?(dependency.package_manager)
|
data/lib/spandx/python/pypi.rb
CHANGED
@@ -13,8 +13,8 @@ module Spandx
|
|
13
13
|
].freeze
|
14
14
|
|
15
15
|
def initialize(http: Spandx.http)
|
16
|
-
@http = http
|
17
16
|
@definitions = {}
|
17
|
+
super
|
18
18
|
end
|
19
19
|
|
20
20
|
def matches?(dependency)
|
@@ -54,15 +54,13 @@ module Spandx
|
|
54
54
|
|
55
55
|
section = path.scan(/-\d+\..*/)
|
56
56
|
section = path.scan(/-\d+\.?.*/) if section.empty?
|
57
|
-
section[-1][1
|
57
|
+
section[-1][1..]
|
58
58
|
rescue StandardError => error
|
59
59
|
warn([url, error].inspect)
|
60
60
|
end
|
61
61
|
|
62
62
|
private
|
63
63
|
|
64
|
-
attr_reader :http
|
65
|
-
|
66
64
|
def cleanup(url)
|
67
65
|
SUBSTITUTIONS.inject(URI.parse(url).path.split('/')[-1]) do |memo, item|
|
68
66
|
memo.gsub(item, '')
|
data/lib/spandx/ruby/gateway.rb
CHANGED
@@ -2,12 +2,8 @@
|
|
2
2
|
|
3
3
|
module Spandx
|
4
4
|
module Ruby
|
5
|
+
# https://guides.rubygems.org/rubygems-org-api-v2/
|
5
6
|
class Gateway < ::Spandx::Core::Gateway
|
6
|
-
# https://guides.rubygems.org/rubygems-org-api-v2/
|
7
|
-
def initialize(http: Spandx.http)
|
8
|
-
@http = http
|
9
|
-
end
|
10
|
-
|
11
7
|
def each
|
12
8
|
response = http.get('https://index.rubygems.org/versions')
|
13
9
|
return unless http.ok?(response)
|
@@ -31,8 +27,6 @@ module Spandx
|
|
31
27
|
|
32
28
|
private
|
33
29
|
|
34
|
-
attr_reader :http
|
35
|
-
|
36
30
|
def parse_each_from(io)
|
37
31
|
_created_at = io.readline
|
38
32
|
_triple_dash = io.readline
|
@@ -4,7 +4,7 @@ module Spandx
|
|
4
4
|
module Ruby
|
5
5
|
module Parsers
|
6
6
|
class GemfileLock < ::Spandx::Core::Parser
|
7
|
-
STRIP_BUNDLED_WITH = /^BUNDLED WITH
|
7
|
+
STRIP_BUNDLED_WITH = /^BUNDLED WITH$\r?\n \d+\.\d+\.\d+/m.freeze
|
8
8
|
|
9
9
|
def match?(pathname)
|
10
10
|
basename = pathname.basename
|
data/lib/spandx/version.rb
CHANGED
data/lib/spandx.rb
CHANGED
@@ -47,7 +47,7 @@ module Spandx
|
|
47
47
|
@git ||= {
|
48
48
|
cache: ::Spandx::Core::Git.new(url: 'https://github.com/spandx/cache.git'),
|
49
49
|
rubygems: ::Spandx::Core::Git.new(url: 'https://github.com/spandx/rubygems-cache.git'),
|
50
|
-
spdx: ::Spandx::Core::Git.new(url: 'https://github.com/spdx/license-list-data.git'
|
50
|
+
spdx: ::Spandx::Core::Git.new(url: 'https://github.com/spdx/license-list-data.git'),
|
51
51
|
}
|
52
52
|
end
|
53
53
|
end
|
data/spandx.gemspec
CHANGED
@@ -11,10 +11,10 @@ Gem::Specification.new do |spec|
|
|
11
11
|
spec.email = ['eldemcan@gmail.com', 'mo@mokhan.ca']
|
12
12
|
|
13
13
|
spec.summary = 'A ruby interface to the SPDX catalogue.'
|
14
|
-
spec.description = '
|
14
|
+
spec.description = 'Spandx is a ruby API for interacting with the spdx.org software license catalogue. This gem includes a command line interface to scan a software project for the software licenses that are associated with each dependency in the project. Spandx also allows you to hook additional information for each dependency found. For instance, you can add plugin to Spandx to find and report vulnerabilities for the dependencies it found.'
|
15
15
|
spec.homepage = 'https://spandx.github.io/'
|
16
16
|
spec.license = 'MIT'
|
17
|
-
spec.required_ruby_version = Gem::Requirement.new('>= 2.
|
17
|
+
spec.required_ruby_version = Gem::Requirement.new('>= 3.2.0')
|
18
18
|
|
19
19
|
spec.metadata['homepage_uri'] = spec.homepage
|
20
20
|
spec.metadata['source_code_uri'] = 'https://github.com/spandx/spandx'
|
@@ -32,30 +32,32 @@ Gem::Specification.new do |spec|
|
|
32
32
|
spec.require_paths = ['lib']
|
33
33
|
spec.extensions = ['ext/spandx/extconf.rb']
|
34
34
|
|
35
|
-
spec.add_dependency 'addressable', '~> 2.
|
35
|
+
spec.add_dependency 'addressable', '~> 2.0'
|
36
36
|
spec.add_dependency 'bundler', '>= 1.16', '< 3.0.0'
|
37
|
+
spec.add_dependency 'csv', '~> 3.0'
|
37
38
|
spec.add_dependency 'hcl2', '~> 0.1'
|
38
39
|
spec.add_dependency 'net-hippie', '~> 1.0'
|
39
|
-
spec.add_dependency 'nokogiri', '~> 1.
|
40
|
-
spec.add_dependency 'oj', '~> 3.
|
40
|
+
spec.add_dependency 'nokogiri', '~> 1.0'
|
41
|
+
spec.add_dependency 'oj', '~> 3.0'
|
41
42
|
spec.add_dependency 'parslet', '~> 2.0'
|
42
43
|
spec.add_dependency 'sorted_set', '~> 1.0'
|
43
|
-
spec.add_dependency 'terminal-table', '~> 1.
|
44
|
-
spec.add_dependency 'thor'
|
45
|
-
spec.add_dependency 'tty-spinner', '~> 0.
|
46
|
-
spec.add_dependency 'zeitwerk', '~> 2.
|
47
|
-
|
48
|
-
spec.add_development_dependency 'benchmark
|
49
|
-
spec.add_development_dependency '
|
50
|
-
spec.add_development_dependency '
|
51
|
-
spec.add_development_dependency '
|
44
|
+
spec.add_dependency 'terminal-table', '~> 1.0'
|
45
|
+
spec.add_dependency 'thor', '~> 1.0'
|
46
|
+
spec.add_dependency 'tty-spinner', '~> 0.1'
|
47
|
+
spec.add_dependency 'zeitwerk', '~> 2.0'
|
48
|
+
|
49
|
+
spec.add_development_dependency 'benchmark', '~> 0.1'
|
50
|
+
spec.add_development_dependency 'benchmark-ips', '~> 2.0'
|
51
|
+
spec.add_development_dependency 'bundler-audit', '~> 0.1'
|
52
|
+
spec.add_development_dependency 'byebug', '~> 11.0'
|
53
|
+
spec.add_development_dependency 'licensed', '~> 2.0'
|
52
54
|
spec.add_development_dependency 'rake', '~> 13.0'
|
53
|
-
spec.add_development_dependency 'rake-compiler', '~> 1.
|
55
|
+
spec.add_development_dependency 'rake-compiler', '~> 1.0'
|
54
56
|
spec.add_development_dependency 'rspec', '~> 3.0'
|
55
|
-
spec.add_development_dependency 'rspec-benchmark', '~> 0.
|
56
|
-
spec.add_development_dependency 'rubocop', '~> 0
|
57
|
-
spec.add_development_dependency 'rubocop-rspec', '~>
|
58
|
-
spec.add_development_dependency 'ruby-prof', '~> 1.
|
57
|
+
spec.add_development_dependency 'rspec-benchmark', '~> 0.1'
|
58
|
+
spec.add_development_dependency 'rubocop', '~> 1.0'
|
59
|
+
spec.add_development_dependency 'rubocop-rspec', '~> 3.0'
|
60
|
+
spec.add_development_dependency 'ruby-prof', '~> 1.0'
|
59
61
|
spec.add_development_dependency 'vcr', '~> 6.0'
|
60
|
-
spec.add_development_dependency 'webmock', '~> 3.
|
62
|
+
spec.add_development_dependency 'webmock', '~> 3.0'
|
61
63
|
end
|
metadata
CHANGED
@@ -1,15 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: spandx
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.19.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Can Eldem
|
8
8
|
- mo khan
|
9
|
-
autorequire:
|
10
9
|
bindir: exe
|
11
10
|
cert_chain: []
|
12
|
-
date:
|
11
|
+
date: 2024-12-31 00:00:00.000000000 Z
|
13
12
|
dependencies:
|
14
13
|
- !ruby/object:Gem::Dependency
|
15
14
|
name: addressable
|
@@ -17,14 +16,14 @@ dependencies:
|
|
17
16
|
requirements:
|
18
17
|
- - "~>"
|
19
18
|
- !ruby/object:Gem::Version
|
20
|
-
version: '2.
|
19
|
+
version: '2.0'
|
21
20
|
type: :runtime
|
22
21
|
prerelease: false
|
23
22
|
version_requirements: !ruby/object:Gem::Requirement
|
24
23
|
requirements:
|
25
24
|
- - "~>"
|
26
25
|
- !ruby/object:Gem::Version
|
27
|
-
version: '2.
|
26
|
+
version: '2.0'
|
28
27
|
- !ruby/object:Gem::Dependency
|
29
28
|
name: bundler
|
30
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -45,6 +44,20 @@ dependencies:
|
|
45
44
|
- - "<"
|
46
45
|
- !ruby/object:Gem::Version
|
47
46
|
version: 3.0.0
|
47
|
+
- !ruby/object:Gem::Dependency
|
48
|
+
name: csv
|
49
|
+
requirement: !ruby/object:Gem::Requirement
|
50
|
+
requirements:
|
51
|
+
- - "~>"
|
52
|
+
- !ruby/object:Gem::Version
|
53
|
+
version: '3.0'
|
54
|
+
type: :runtime
|
55
|
+
prerelease: false
|
56
|
+
version_requirements: !ruby/object:Gem::Requirement
|
57
|
+
requirements:
|
58
|
+
- - "~>"
|
59
|
+
- !ruby/object:Gem::Version
|
60
|
+
version: '3.0'
|
48
61
|
- !ruby/object:Gem::Dependency
|
49
62
|
name: hcl2
|
50
63
|
requirement: !ruby/object:Gem::Requirement
|
@@ -79,28 +92,28 @@ dependencies:
|
|
79
92
|
requirements:
|
80
93
|
- - "~>"
|
81
94
|
- !ruby/object:Gem::Version
|
82
|
-
version: '1.
|
95
|
+
version: '1.0'
|
83
96
|
type: :runtime
|
84
97
|
prerelease: false
|
85
98
|
version_requirements: !ruby/object:Gem::Requirement
|
86
99
|
requirements:
|
87
100
|
- - "~>"
|
88
101
|
- !ruby/object:Gem::Version
|
89
|
-
version: '1.
|
102
|
+
version: '1.0'
|
90
103
|
- !ruby/object:Gem::Dependency
|
91
104
|
name: oj
|
92
105
|
requirement: !ruby/object:Gem::Requirement
|
93
106
|
requirements:
|
94
107
|
- - "~>"
|
95
108
|
- !ruby/object:Gem::Version
|
96
|
-
version: '3.
|
109
|
+
version: '3.0'
|
97
110
|
type: :runtime
|
98
111
|
prerelease: false
|
99
112
|
version_requirements: !ruby/object:Gem::Requirement
|
100
113
|
requirements:
|
101
114
|
- - "~>"
|
102
115
|
- !ruby/object:Gem::Version
|
103
|
-
version: '3.
|
116
|
+
version: '3.0'
|
104
117
|
- !ruby/object:Gem::Dependency
|
105
118
|
name: parslet
|
106
119
|
requirement: !ruby/object:Gem::Requirement
|
@@ -135,112 +148,126 @@ dependencies:
|
|
135
148
|
requirements:
|
136
149
|
- - "~>"
|
137
150
|
- !ruby/object:Gem::Version
|
138
|
-
version: '1.
|
151
|
+
version: '1.0'
|
139
152
|
type: :runtime
|
140
153
|
prerelease: false
|
141
154
|
version_requirements: !ruby/object:Gem::Requirement
|
142
155
|
requirements:
|
143
156
|
- - "~>"
|
144
157
|
- !ruby/object:Gem::Version
|
145
|
-
version: '1.
|
158
|
+
version: '1.0'
|
146
159
|
- !ruby/object:Gem::Dependency
|
147
160
|
name: thor
|
148
161
|
requirement: !ruby/object:Gem::Requirement
|
149
162
|
requirements:
|
150
|
-
- - "
|
163
|
+
- - "~>"
|
151
164
|
- !ruby/object:Gem::Version
|
152
|
-
version: '0'
|
165
|
+
version: '1.0'
|
153
166
|
type: :runtime
|
154
167
|
prerelease: false
|
155
168
|
version_requirements: !ruby/object:Gem::Requirement
|
156
169
|
requirements:
|
157
|
-
- - "
|
170
|
+
- - "~>"
|
158
171
|
- !ruby/object:Gem::Version
|
159
|
-
version: '0'
|
172
|
+
version: '1.0'
|
160
173
|
- !ruby/object:Gem::Dependency
|
161
174
|
name: tty-spinner
|
162
175
|
requirement: !ruby/object:Gem::Requirement
|
163
176
|
requirements:
|
164
177
|
- - "~>"
|
165
178
|
- !ruby/object:Gem::Version
|
166
|
-
version: '0.
|
179
|
+
version: '0.1'
|
167
180
|
type: :runtime
|
168
181
|
prerelease: false
|
169
182
|
version_requirements: !ruby/object:Gem::Requirement
|
170
183
|
requirements:
|
171
184
|
- - "~>"
|
172
185
|
- !ruby/object:Gem::Version
|
173
|
-
version: '0.
|
186
|
+
version: '0.1'
|
174
187
|
- !ruby/object:Gem::Dependency
|
175
188
|
name: zeitwerk
|
176
189
|
requirement: !ruby/object:Gem::Requirement
|
177
190
|
requirements:
|
178
191
|
- - "~>"
|
179
192
|
- !ruby/object:Gem::Version
|
180
|
-
version: '2.
|
193
|
+
version: '2.0'
|
181
194
|
type: :runtime
|
182
195
|
prerelease: false
|
183
196
|
version_requirements: !ruby/object:Gem::Requirement
|
184
197
|
requirements:
|
185
198
|
- - "~>"
|
186
199
|
- !ruby/object:Gem::Version
|
187
|
-
version: '2.
|
200
|
+
version: '2.0'
|
201
|
+
- !ruby/object:Gem::Dependency
|
202
|
+
name: benchmark
|
203
|
+
requirement: !ruby/object:Gem::Requirement
|
204
|
+
requirements:
|
205
|
+
- - "~>"
|
206
|
+
- !ruby/object:Gem::Version
|
207
|
+
version: '0.1'
|
208
|
+
type: :development
|
209
|
+
prerelease: false
|
210
|
+
version_requirements: !ruby/object:Gem::Requirement
|
211
|
+
requirements:
|
212
|
+
- - "~>"
|
213
|
+
- !ruby/object:Gem::Version
|
214
|
+
version: '0.1'
|
188
215
|
- !ruby/object:Gem::Dependency
|
189
216
|
name: benchmark-ips
|
190
217
|
requirement: !ruby/object:Gem::Requirement
|
191
218
|
requirements:
|
192
219
|
- - "~>"
|
193
220
|
- !ruby/object:Gem::Version
|
194
|
-
version: '2.
|
221
|
+
version: '2.0'
|
195
222
|
type: :development
|
196
223
|
prerelease: false
|
197
224
|
version_requirements: !ruby/object:Gem::Requirement
|
198
225
|
requirements:
|
199
226
|
- - "~>"
|
200
227
|
- !ruby/object:Gem::Version
|
201
|
-
version: '2.
|
228
|
+
version: '2.0'
|
202
229
|
- !ruby/object:Gem::Dependency
|
203
230
|
name: bundler-audit
|
204
231
|
requirement: !ruby/object:Gem::Requirement
|
205
232
|
requirements:
|
206
233
|
- - "~>"
|
207
234
|
- !ruby/object:Gem::Version
|
208
|
-
version: '0.
|
235
|
+
version: '0.1'
|
209
236
|
type: :development
|
210
237
|
prerelease: false
|
211
238
|
version_requirements: !ruby/object:Gem::Requirement
|
212
239
|
requirements:
|
213
240
|
- - "~>"
|
214
241
|
- !ruby/object:Gem::Version
|
215
|
-
version: '0.
|
242
|
+
version: '0.1'
|
216
243
|
- !ruby/object:Gem::Dependency
|
217
244
|
name: byebug
|
218
245
|
requirement: !ruby/object:Gem::Requirement
|
219
246
|
requirements:
|
220
247
|
- - "~>"
|
221
248
|
- !ruby/object:Gem::Version
|
222
|
-
version: '11.
|
249
|
+
version: '11.0'
|
223
250
|
type: :development
|
224
251
|
prerelease: false
|
225
252
|
version_requirements: !ruby/object:Gem::Requirement
|
226
253
|
requirements:
|
227
254
|
- - "~>"
|
228
255
|
- !ruby/object:Gem::Version
|
229
|
-
version: '11.
|
256
|
+
version: '11.0'
|
230
257
|
- !ruby/object:Gem::Dependency
|
231
258
|
name: licensed
|
232
259
|
requirement: !ruby/object:Gem::Requirement
|
233
260
|
requirements:
|
234
261
|
- - "~>"
|
235
262
|
- !ruby/object:Gem::Version
|
236
|
-
version: '2.
|
263
|
+
version: '2.0'
|
237
264
|
type: :development
|
238
265
|
prerelease: false
|
239
266
|
version_requirements: !ruby/object:Gem::Requirement
|
240
267
|
requirements:
|
241
268
|
- - "~>"
|
242
269
|
- !ruby/object:Gem::Version
|
243
|
-
version: '2.
|
270
|
+
version: '2.0'
|
244
271
|
- !ruby/object:Gem::Dependency
|
245
272
|
name: rake
|
246
273
|
requirement: !ruby/object:Gem::Requirement
|
@@ -261,14 +288,14 @@ dependencies:
|
|
261
288
|
requirements:
|
262
289
|
- - "~>"
|
263
290
|
- !ruby/object:Gem::Version
|
264
|
-
version: '1.
|
291
|
+
version: '1.0'
|
265
292
|
type: :development
|
266
293
|
prerelease: false
|
267
294
|
version_requirements: !ruby/object:Gem::Requirement
|
268
295
|
requirements:
|
269
296
|
- - "~>"
|
270
297
|
- !ruby/object:Gem::Version
|
271
|
-
version: '1.
|
298
|
+
version: '1.0'
|
272
299
|
- !ruby/object:Gem::Dependency
|
273
300
|
name: rspec
|
274
301
|
requirement: !ruby/object:Gem::Requirement
|
@@ -289,56 +316,56 @@ dependencies:
|
|
289
316
|
requirements:
|
290
317
|
- - "~>"
|
291
318
|
- !ruby/object:Gem::Version
|
292
|
-
version: '0.
|
319
|
+
version: '0.1'
|
293
320
|
type: :development
|
294
321
|
prerelease: false
|
295
322
|
version_requirements: !ruby/object:Gem::Requirement
|
296
323
|
requirements:
|
297
324
|
- - "~>"
|
298
325
|
- !ruby/object:Gem::Version
|
299
|
-
version: '0.
|
326
|
+
version: '0.1'
|
300
327
|
- !ruby/object:Gem::Dependency
|
301
328
|
name: rubocop
|
302
329
|
requirement: !ruby/object:Gem::Requirement
|
303
330
|
requirements:
|
304
331
|
- - "~>"
|
305
332
|
- !ruby/object:Gem::Version
|
306
|
-
version: '0
|
333
|
+
version: '1.0'
|
307
334
|
type: :development
|
308
335
|
prerelease: false
|
309
336
|
version_requirements: !ruby/object:Gem::Requirement
|
310
337
|
requirements:
|
311
338
|
- - "~>"
|
312
339
|
- !ruby/object:Gem::Version
|
313
|
-
version: '0
|
340
|
+
version: '1.0'
|
314
341
|
- !ruby/object:Gem::Dependency
|
315
342
|
name: rubocop-rspec
|
316
343
|
requirement: !ruby/object:Gem::Requirement
|
317
344
|
requirements:
|
318
345
|
- - "~>"
|
319
346
|
- !ruby/object:Gem::Version
|
320
|
-
version: '
|
347
|
+
version: '3.0'
|
321
348
|
type: :development
|
322
349
|
prerelease: false
|
323
350
|
version_requirements: !ruby/object:Gem::Requirement
|
324
351
|
requirements:
|
325
352
|
- - "~>"
|
326
353
|
- !ruby/object:Gem::Version
|
327
|
-
version: '
|
354
|
+
version: '3.0'
|
328
355
|
- !ruby/object:Gem::Dependency
|
329
356
|
name: ruby-prof
|
330
357
|
requirement: !ruby/object:Gem::Requirement
|
331
358
|
requirements:
|
332
359
|
- - "~>"
|
333
360
|
- !ruby/object:Gem::Version
|
334
|
-
version: '1.
|
361
|
+
version: '1.0'
|
335
362
|
type: :development
|
336
363
|
prerelease: false
|
337
364
|
version_requirements: !ruby/object:Gem::Requirement
|
338
365
|
requirements:
|
339
366
|
- - "~>"
|
340
367
|
- !ruby/object:Gem::Version
|
341
|
-
version: '1.
|
368
|
+
version: '1.0'
|
342
369
|
- !ruby/object:Gem::Dependency
|
343
370
|
name: vcr
|
344
371
|
requirement: !ruby/object:Gem::Requirement
|
@@ -359,15 +386,15 @@ dependencies:
|
|
359
386
|
requirements:
|
360
387
|
- - "~>"
|
361
388
|
- !ruby/object:Gem::Version
|
362
|
-
version: '3.
|
389
|
+
version: '3.0'
|
363
390
|
type: :development
|
364
391
|
prerelease: false
|
365
392
|
version_requirements: !ruby/object:Gem::Requirement
|
366
393
|
requirements:
|
367
394
|
- - "~>"
|
368
395
|
- !ruby/object:Gem::Version
|
369
|
-
version: '3.
|
370
|
-
description:
|
396
|
+
version: '3.0'
|
397
|
+
description: Spandx is a ruby API for interacting with the spdx.org software license
|
371
398
|
catalogue. This gem includes a command line interface to scan a software project
|
372
399
|
for the software licenses that are associated with each dependency in the project.
|
373
400
|
Spandx also allows you to hook additional information for each dependency found.
|
@@ -458,7 +485,6 @@ metadata:
|
|
458
485
|
homepage_uri: https://spandx.github.io/
|
459
486
|
source_code_uri: https://github.com/spandx/spandx
|
460
487
|
changelog_uri: https://github.com/spandx/spandx/blob/main/CHANGELOG.md
|
461
|
-
post_install_message:
|
462
488
|
rdoc_options: []
|
463
489
|
require_paths:
|
464
490
|
- lib
|
@@ -466,15 +492,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
466
492
|
requirements:
|
467
493
|
- - ">="
|
468
494
|
- !ruby/object:Gem::Version
|
469
|
-
version: 2.
|
495
|
+
version: 3.2.0
|
470
496
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
471
497
|
requirements:
|
472
498
|
- - ">="
|
473
499
|
- !ruby/object:Gem::Version
|
474
500
|
version: '0'
|
475
501
|
requirements: []
|
476
|
-
rubygems_version: 3.2
|
477
|
-
signing_key:
|
502
|
+
rubygems_version: 3.6.2
|
478
503
|
specification_version: 4
|
479
504
|
summary: A ruby interface to the SPDX catalogue.
|
480
505
|
test_files: []
|