spandx 0.9.0 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 79c26ff1c6227ef41ae24c085ccb96310496cbcc1abe22b699923abdbdf65782
-  data.tar.gz: 66bdc945e5121bd540c5195f2c440c4b9263cc0eb1318f185e37be714cb6066a
+  metadata.gz: 1d79550851ea469111afa11278eb65d96055ad0aa5bc1a70d00bf82d9ea84b44
+  data.tar.gz: 0c903febe2ab97e073615d7bddbbdbd76dfad94f2039179017bc07760614b6e4
 SHA512:
-  metadata.gz: 6fd8df3eb4d2bc17ce5b8e2fc61c02a2e825b942cc370e5f05f8a5b3611d223df755b590e7a83ccdd535d6a21b36066c10b90400735acbe4957d97882d378655
-  data.tar.gz: 7234556c740534481007edefde42319b091363865a238c0aa8656ce194fc0b1c80c37365eb287482310d1930511344019aadc3548912b2031af314098ad8ea7f
+  metadata.gz: 49e79d0f080044bd3e3fe5700f147ba88f0581b13ce655438298481fc9a3a257c35c12b80ae40aff6fde5f4281eb39eaba294a93fcae78c4955433a6feeec558
+  data.tar.gz: c428a2570f2124f4d7271233c34fa22618672f2512afdfa74950dd3d7412b7ee3cf2cb35d55a4de60db682ddb92081c5bdf5e6dbed8b21173c45b034e4715056

data/CHANGELOG.md

@@ -1,4 +1,4 @@
-Version 0.9.0
+Version 0.10.0
 
 # Changelog
 
@@ -9,6 +9,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.10.0] - 2020-03-16
+### Added
+- Include additional ruby gem spec metadata.
+- Install `spandx-index` as an index source
+
 ## [0.9.0] - 2020-03-12
 ### Added
 - Add `--airgap` option to disable network traffic during scan.
@@ -101,7 +106,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Provide ruby API to the latest SPDX catalogue.
 
-[Unreleased]: https://github.com/mokhan/spandx/compare/v0.9.0...HEAD
+[Unreleased]: https://github.com/mokhan/spandx/compare/v0.10.0...HEAD
+[0.10.0]: https://github.com/mokhan/spandx/compare/v0.9.0...v0.10.0
 [0.9.0]: https://github.com/mokhan/spandx/compare/v0.8.0...v0.9.0
 [0.8.0]: https://github.com/mokhan/spandx/compare/v0.7.0...v0.8.0
 [0.7.0]: https://github.com/mokhan/spandx/compare/v0.6.0...v0.7.0

data/lib/spandx/cli/commands/index/update.rb

@@ -11,6 +11,7 @@ module Spandx
 
           def execute(output: $stdout)
             [
+              'https://github.com/mokhan/spandx-index.git',
               'https://github.com/mokhan/spandx-rubygems.git',
               'https://github.com/spdx/license-list-data.git',
             ].each do |url|

data/lib/spandx/core/dependency.rb

@@ -3,12 +3,13 @@
 module Spandx
   module Core
     class Dependency
-      attr_reader :name, :version, :licenses
+      attr_reader :name, :meta, :version, :licenses
 
-      def initialize(name:, version:, licenses: [])
+      def initialize(name:, version:, licenses: [], meta: {})
         @name = name
         @version = version
         @licenses = licenses
+        @meta = meta
       end
 
       def to_h

data/lib/spandx/rubygems/parsers/gemfile_lock.rb

@@ -16,7 +16,8 @@ module Spandx
             ::Spandx::Core::Dependency.new(
               name: specification.name,
               version: specification.version.to_s,
-              licenses: licenses_for(specification)
+              licenses: licenses_for(specification),
+              meta: specification
             )
           end
         end

data/lib/spandx/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Spandx
-  VERSION = '0.9.0'
+  VERSION = '0.10.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spandx
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.10.0
 platform: ruby
 authors:
 - mo khan
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-03-12 00:00:00.000000000 Z
+date: 2020-03-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable