@callstack/licenses 0.3.1 → 0.3.3

package/build/node/common.js

@@ -10,7 +10,7 @@ exports.generateAboutLibrariesNPMOutput = generateAboutLibrariesNPMOutput;
 exports.writeAboutLibrariesNPMOutput = writeAboutLibrariesNPMOutput;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const glob_1 = __importDefault(require("glob"));
+const glob_1 = require("glob");
 const utils_1 = require("../utils");
 const utils_2 = require("./utils");
 /**
@@ -46,7 +46,7 @@ function scanPackage(packageName, requiredVersion, processedPackages, result, sc
         }
         const localPackageJson = require(node_path_1.default.resolve(localPackageJsonPath));
         if (localPackageJson.private !== true) {
-            const licenseFiles = glob_1.default.sync('LICEN{S,C}E{.md,}', {
+            const licenseFiles = glob_1.glob.sync('LICEN{S,C}E{.md,}', {
                 cwd: node_path_1.default.dirname(localPackageJsonPath),
                 absolute: true,
                 nocase: true,
@@ -197,7 +197,7 @@ function generateLicensePlistNPMOutput(licenses, iosProjectPath) {
         if (!localPackageJsonPath) {
             return acc;
         }
-        const podspecFiles = glob_1.default.sync('**.podspec', {
+        const podspecFiles = glob_1.glob.sync('**.podspec', {
             cwd: node_path_1.default.dirname(localPackageJsonPath),
             absolute: true,
             nocase: true,

package/build/node/utils/packageUtils.js

@@ -62,7 +62,13 @@ function prepareAboutLibrariesLicenseField(license) {
     if (!license.type) {
         return '';
     }
-    return `${license.type}_${(0, miscUtils_1.sha512)(license.content ?? license.type)}`;
+    // The returned value is used as a filename under `android/config/licenses/`.
+    // Legacy/compound SPDX expressions like `MIT/X11` or `(MIT OR Apache-2.0)` would
+    // otherwise produce paths containing `/`, `(` or spaces, which causes the writer
+    // to either fail with ENOENT (when a `/` is interpreted as a subdirectory) or
+    // to produce names that are invalid on some filesystems.
+    const sanitizedType = license.type.replace(/[^A-Za-z0-9._-]/g, '_');
+    return `${sanitizedType}_${(0, miscUtils_1.sha512)(license.content ?? sanitizedType)}`;
 }
 function parseAuthorField(json) {
     if (typeof json.author === 'object' && typeof json.author.name === 'string') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@callstack/licenses",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "API package that exposes functionalities for programmatic scanning of licenses in Node.js projects.",
   "browser": "./build/index.js",
   "main": "./build/node/index.js",
@@ -64,13 +64,12 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "glob": "^7.1.3"
+    "glob": "^13.0.0"
   },
   "devDependencies": {
-    "@babel/core": "7.27.4",
-    "@babel/preset-env": "7.27.2",
-    "@babel/preset-typescript": "7.27.1",
-    "@types/glob": "^8.1.0",
+    "@babel/core": "^7.29.7",
+    "@babel/preset-env": "^7.29.7",
+    "@babel/preset-typescript": "^7.29.7",
     "@types/jest": "^29.5.5",
     "babel-jest": "^29.7.0",
     "jest": "^29.7.0",

package/src/node/common.ts

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 
-import glob from 'glob';
+import { glob } from 'glob';
 
 import type {
   AboutLibrariesLibraryJsonPayload,

package/src/node/utils/packageUtils.ts

@@ -59,7 +59,14 @@ export function prepareAboutLibrariesLicenseField(license: License) {
     return '';
   }
 
-  return `${license.type}_${sha512(license.content ?? license.type)}`;
+  // The returned value is used as a filename under `android/config/licenses/`.
+  // Legacy/compound SPDX expressions like `MIT/X11` or `(MIT OR Apache-2.0)` would
+  // otherwise produce paths containing `/`, `(` or spaces, which causes the writer
+  // to either fail with ENOENT (when a `/` is interpreted as a subdirectory) or
+  // to produce names that are invalid on some filesystems.
+  const sanitizedType = license.type.replace(/[^A-Za-z0-9._-]/g, '_');
+
+  return `${sanitizedType}_${sha512(license.content ?? sanitizedType)}`;
 }
 
 export function parseAuthorField(json: { author: string | { name: string } }) {