spandx 0.18.2 → 0.18.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 28d95986ecfe3d8616d52256ecf28003eb4cc6c28e30a6733e9e4e1012cf5375
-  data.tar.gz: bd8f7c53dbfa43e13a2f1a4f54c7a2517e70f3e529b1792b18ce6ef9cc208091
+  metadata.gz: 81626f66bcff1fbe9a38a489f72e0f00bbd355f91ed43582e563a04089016e83
+  data.tar.gz: b5ed156f7c0b5f9972d2e8e564dd37666f1fa8acf5c26ae4192db2a4d6d68c2e
 SHA512:
-  metadata.gz: b97733866a711008bebc338ff77e452696d5ae1f7c8b486fb13b08adc20c8fd2483cc288766920525057967889b3e42632abb0f6dd5cf03f273965ae27b0d1c8
-  data.tar.gz: fa296185eacf57b16c7f9b54cd9d1b19c8bfa524ce3de6b256b007a1c9d9cf41c51eb7c99e10331265d48b415c94119c1e2097f10764c2d4f420eb91762cf1f9
+  metadata.gz: e81245600853fa6677deedd50ece29463a50736c44cb4503391e8777b31f3493c4d9405cc33bde47538d2f991befea153abdefe0b9cfe04954f0c73277c70005
+  data.tar.gz: 190c97f3ab8e9431a5ca52ffd4dfb524f6438997a8912288c8abd821e220dfbda149fe1107f0f63b6e8e5bff6258a312800654764073e1c929182175bc89a27c

data/CHANGELOG.md

@@ -1,4 +1,4 @@
-Version 0.18.2
+Version 0.18.3
 
 # Changelog
 
@@ -9,6 +9,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.18.3] - 2021-12-15
+- fix(spdx): fallback to online catalogue when local catalogue is not available.
+
 ## [0.18.2] - 2021-06-05
 ### Fixed
 - fix(dpkg): detect package manager for related dependencies
@@ -237,7 +240,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Provide ruby API to the latest SPDX catalogue.
 
-[Unreleased]: https://github.com/spandx/spandx/compare/v0.18.2...HEAD
+[Unreleased]: https://github.com/spandx/spandx/compare/v0.18.3...HEAD
+[0.18.3]: https://github.com/spandx/spandx/compare/v0.18.2...v0.18.3
 [0.18.2]: https://github.com/spandx/spandx/compare/v0.18.1...v0.18.2
 [0.18.1]: https://github.com/spandx/spandx/compare/v0.18.0...v0.18.1
 [0.18.0]: https://github.com/spandx/spandx/compare/v0.17.0...v0.18.0

data/lib/spandx/spdx/catalogue.rb

@@ -37,7 +37,8 @@ module Spandx
         end
 
         def from_git
-          from_json(Spandx.git[:spdx].read('json/licenses.json'))
+          json = Spandx.git[:spdx].read('json/licenses.json')
+          json ? from_json(json) : latest
         end
 
         def default

data/lib/spandx/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Spandx
-  VERSION = '0.18.2'
+  VERSION = '0.18.3'
 end

data/spandx.gemspec

@@ -11,7 +11,7 @@ Gem::Specification.new do |spec|
   spec.email         = ['eldemcan@gmail.com', 'mo@mokhan.ca']
 
   spec.summary       = 'A ruby interface to the SPDX catalogue.'
-  spec.description   = 'Spanx is a ruby API for interacting with the spdx.org software license catalogue. This gem includes a command line interface to scan a software project for the software licenses that are associated with each dependency in the project. Spandx also allows you to hook additional information for each dependency found. For instance, you can add plugin to Spandx to find and report vulnerabilities for the dependencies it found.'
+  spec.description   = 'Spandx is a ruby API for interacting with the spdx.org software license catalogue. This gem includes a command line interface to scan a software project for the software licenses that are associated with each dependency in the project. Spandx also allows you to hook additional information for each dependency found. For instance, you can add plugin to Spandx to find and report vulnerabilities for the dependencies it found.'
   spec.homepage      = 'https://spandx.github.io/'
   spec.license       = 'MIT'
   spec.required_ruby_version = Gem::Requirement.new('>= 2.6.0')

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spandx
 version: !ruby/object:Gem::Version
-  version: 0.18.2
+  version: 0.18.3
 platform: ruby
 authors:
 - Can Eldem
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2021-06-05 00:00:00.000000000 Z
+date: 2021-12-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable
@@ -367,7 +367,7 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.7'
-description: Spanx is a ruby API for interacting with the spdx.org software license
+description: Spandx is a ruby API for interacting with the spdx.org software license
   catalogue. This gem includes a command line interface to scan a software project
   for the software licenses that are associated with each dependency in the project.
   Spandx also allows you to hook additional information for each dependency found.
@@ -473,7 +473,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.19
+rubygems_version: 3.2.32
 signing_key:
 specification_version: 4
 summary: A ruby interface to the SPDX catalogue.