license-cop 1.0.2 → 1.2.0

package/src/lib/config/load-parent-config.js

@@ -1,7 +1,4 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
 Object.defineProperty(exports, "loadParentConfig", {
     enumerable: true,
     get: ()=>loadParentConfig
@@ -9,6 +6,7 @@ Object.defineProperty(exports, "loadParentConfig", {
 const _github = require("./parent-resolutions/github");
 const _npm = require("./parent-resolutions/npm");
 const _http = require("./parent-resolutions/http");
+const _configError = require("./config-error");
 const loadParentConfig = async (parentConfigPath, rootDir)=>{
     if (parentConfigPath.startsWith("npm:")) {
         const packageName = parentConfigPath.substring(4);
@@ -24,7 +22,7 @@ const loadParentConfig = async (parentConfigPath, rootDir)=>{
     if (await (0, _npm.nodeModuleExists)(parentConfigPath, rootDir)) {
         return await (0, _npm.npmResolution)(parentConfigPath, rootDir);
     }
-    throw new Error(`Invalid parent config location: ${parentConfigPath}`);
+    throw new _configError.ConfigError(`Invalid parent config location: ${parentConfigPath}`);
 };
 
 //# sourceMappingURL=load-parent-config.js.map

package/src/lib/config/load-parent-config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../packages/license-cop/src/lib/config/load-parent-config.ts"],"sourcesContent":["import { githubResolution } from \"./parent-resolutions/github\";\nimport { nodeModuleExists, npmResolution } from \"./parent-resolutions/npm\";\nimport { httpResolution } from \"./parent-resolutions/http\";\n\nexport const loadParentConfig = async (\n  parentConfigPath: string,\n  rootDir: string\n): Promise<unknown> => {\n  if (parentConfigPath.startsWith(\"npm:\")) {\n    const packageName = parentConfigPath.substring(4);\n    return await npmResolution(packageName, rootDir);\n  }\n\n  if (parentConfigPath.startsWith(\"github:\")) {\n    const repo = parentConfigPath.substring(7);\n    return await githubResolution(repo);\n  }\n\n  if (parentConfigPath.startsWith(\"http\")) {\n    return await httpResolution(parentConfigPath);\n  }\n\n  if (await nodeModuleExists(parentConfigPath, rootDir)) {\n    return await npmResolution(parentConfigPath, rootDir);\n  }\n\n  throw new Error(`Invalid parent config location: ${parentConfigPath}`);\n};\n"],"names":["loadParentConfig","parentConfigPath","rootDir","startsWith","packageName","substring","npmResolution","repo","githubResolution","httpResolution","nodeModuleExists","Error"],"mappings":";;;;+BAIaA;;aAAAA;;wBAJoB;qBACe;sBACjB;AAExB,MAAMA,mBAAmB,OAC9BC,kBACAC,UACqB;IACrB,IAAID,iBAAiBE,UAAU,CAAC,SAAS;QACvC,MAAMC,cAAcH,iBAAiBI,SAAS,CAAC;QAC/C,OAAO,MAAMC,IAAAA,kBAAa,EAACF,aAAaF;IAC1C,CAAC;IAED,IAAID,iBAAiBE,UAAU,CAAC,YAAY;QAC1C,MAAMI,OAAON,iBAAiBI,SAAS,CAAC;QACxC,OAAO,MAAMG,IAAAA,wBAAgB,EAACD;IAChC,CAAC;IAED,IAAIN,iBAAiBE,UAAU,CAAC,SAAS;QACvC,OAAO,MAAMM,IAAAA,oBAAc,EAACR;IAC9B,CAAC;IAED,IAAI,MAAMS,IAAAA,qBAAgB,EAACT,kBAAkBC,UAAU;QACrD,OAAO,MAAMI,IAAAA,kBAAa,EAACL,kBAAkBC;IAC/C,CAAC;IAED,MAAM,IAAIS,MAAM,CAAC,gCAAgC,EAAEV,iBAAiB,CAAC,EAAE;AACzE"}
+{"version":3,"sources":["../../../../../../packages/license-cop/src/lib/config/load-parent-config.ts"],"sourcesContent":["import { githubResolution } from \"./parent-resolutions/github\";\nimport { nodeModuleExists, npmResolution } from \"./parent-resolutions/npm\";\nimport { httpResolution } from \"./parent-resolutions/http\";\nimport { ConfigError } from \"./config-error\";\n\nexport const loadParentConfig = async (\n  parentConfigPath: string,\n  rootDir: string\n): Promise<unknown> => {\n  if (parentConfigPath.startsWith(\"npm:\")) {\n    const packageName = parentConfigPath.substring(4);\n    return await npmResolution(packageName, rootDir);\n  }\n\n  if (parentConfigPath.startsWith(\"github:\")) {\n    const repo = parentConfigPath.substring(7);\n    return await githubResolution(repo);\n  }\n\n  if (parentConfigPath.startsWith(\"http\")) {\n    return await httpResolution(parentConfigPath);\n  }\n\n  if (await nodeModuleExists(parentConfigPath, rootDir)) {\n    return await npmResolution(parentConfigPath, rootDir);\n  }\n\n  throw new ConfigError(`Invalid parent config location: ${parentConfigPath}`);\n};\n"],"names":["loadParentConfig","parentConfigPath","rootDir","startsWith","packageName","substring","npmResolution","repo","githubResolution","httpResolution","nodeModuleExists","ConfigError"],"mappings":";+BAKaA;;aAAAA;;wBALoB;qBACe;sBACjB;6BACH;AAErB,MAAMA,mBAAmB,OAC9BC,kBACAC,UACqB;IACrB,IAAID,iBAAiBE,UAAU,CAAC,SAAS;QACvC,MAAMC,cAAcH,iBAAiBI,SAAS,CAAC;QAC/C,OAAO,MAAMC,IAAAA,kBAAa,EAACF,aAAaF;IAC1C,CAAC;IAED,IAAID,iBAAiBE,UAAU,CAAC,YAAY;QAC1C,MAAMI,OAAON,iBAAiBI,SAAS,CAAC;QACxC,OAAO,MAAMG,IAAAA,wBAAgB,EAACD;IAChC,CAAC;IAED,IAAIN,iBAAiBE,UAAU,CAAC,SAAS;QACvC,OAAO,MAAMM,IAAAA,oBAAc,EAACR;IAC9B,CAAC;IAED,IAAI,MAAMS,IAAAA,qBAAgB,EAACT,kBAAkBC,UAAU;QACrD,OAAO,MAAMI,IAAAA,kBAAa,EAACL,kBAAkBC;IAC/C,CAAC;IAED,MAAM,IAAIS,wBAAW,CAAC,CAAC,gCAAgC,EAAEV,iBAAiB,CAAC,EAAE;AAC/E"}

package/src/lib/config/parent-resolutions/github.d.ts

@@ -1 +1 @@
-export declare const githubResolution: (repoId: string) => Promise<any>;
+export declare const githubResolution: (repoId: string) => Promise<unknown>;

package/src/lib/config/parent-resolutions/github.js

@@ -1,23 +1,26 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
 Object.defineProperty(exports, "githubResolution", {
     enumerable: true,
     get: ()=>githubResolution
 });
-const _interopRequireDefault = require("@swc/helpers/lib/_interop_require_default.js").default;
 const _gitFilesystem = require("git-filesystem");
-const _json5 = /*#__PURE__*/ _interopRequireDefault(require("json5"));
+const _logger = require("../../logger");
+const _configError = require("../config-error");
+const _json5 = require("../parsers/json5");
 const githubResolution = async (repoId)=>{
+    _logger.default.verbose(`Resolving config from GitHub repo: ${repoId}`);
     const parts = repoId.split("/");
     if (parts.length !== 2 || parts[0].length === 0 || parts[1].length === 0) {
-        throw new Error(`Invalid GitHub repo ID: ${repoId}`);
+        throw new _configError.ConfigError(`Invalid GitHub repo ID: ${repoId}`);
     }
     const [owner, repoName] = parts;
-    const repo = new _gitFilesystem.GitHubClient(owner, "", "license-cop").getReadonlyRepository(repoName);
-    const fileContent = await repo.readFile(".licenses.json");
-    return _json5.default.parse(fileContent);
+    try {
+        const repo = new _gitFilesystem.GitHubClient(owner, "", "license-cop").getReadonlyRepository(repoName);
+        const fileContent = await repo.readFile(".licenses.json");
+        return (0, _json5.json5Parse)(fileContent);
+    } catch (e) {
+        throw new _configError.ConfigError(`Could not resolve config from GitHub repo: ${repoId}, error: ${JSON.stringify(e)}`);
+    }
 };
 
 //# sourceMappingURL=github.js.map

package/src/lib/config/parent-resolutions/github.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parent-resolutions/github.ts"],"sourcesContent":["import { GitHubClient } from \"git-filesystem\";\nimport JSON5 from \"json5\";\n\nexport const githubResolution = async (repoId: string) => {\n  const parts = repoId.split(\"/\");\n\n  if (parts.length !== 2 || parts[0].length === 0 || parts[1].length === 0) {\n    throw new Error(`Invalid GitHub repo ID: ${repoId}`);\n  }\n\n  const [owner, repoName] = parts;\n\n  const repo = new GitHubClient(owner, \"\", \"license-cop\").getReadonlyRepository(repoName);\n  const fileContent = await repo.readFile(\".licenses.json\");\n\n  return JSON5.parse(fileContent);\n};\n"],"names":["githubResolution","repoId","parts","split","length","Error","owner","repoName","repo","GitHubClient","getReadonlyRepository","fileContent","readFile","JSON5","parse"],"mappings":";;;;+BAGaA;;aAAAA;;;+BAHgB;4DACX;AAEX,MAAMA,mBAAmB,OAAOC,SAAmB;IACxD,MAAMC,QAAQD,OAAOE,KAAK,CAAC;IAE3B,IAAID,MAAME,MAAM,KAAK,KAAKF,KAAK,CAAC,EAAE,CAACE,MAAM,KAAK,KAAKF,KAAK,CAAC,EAAE,CAACE,MAAM,KAAK,GAAG;QACxE,MAAM,IAAIC,MAAM,CAAC,wBAAwB,EAAEJ,OAAO,CAAC,EAAE;IACvD,CAAC;IAED,MAAM,CAACK,OAAOC,SAAS,GAAGL;IAE1B,MAAMM,OAAO,IAAIC,2BAAY,CAACH,OAAO,IAAI,eAAeI,qBAAqB,CAACH;IAC9E,MAAMI,cAAc,MAAMH,KAAKI,QAAQ,CAAC;IAExC,OAAOC,cAAK,CAACC,KAAK,CAACH;AACrB"}
+{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parent-resolutions/github.ts"],"sourcesContent":["import { GitHubClient } from \"git-filesystem\";\nimport logger from \"../../logger\";\nimport { ConfigError } from \"../config-error\";\nimport { json5Parse } from \"../parsers/json5\";\n\nexport const githubResolution = async (repoId: string) => {\n  logger.verbose(`Resolving config from GitHub repo: ${repoId}`);\n\n  const parts = repoId.split(\"/\");\n\n  if (parts.length !== 2 || parts[0].length === 0 || parts[1].length === 0) {\n    throw new ConfigError(`Invalid GitHub repo ID: ${repoId}`);\n  }\n\n  const [owner, repoName] = parts;\n\n  try {\n    const repo = new GitHubClient(owner, \"\", \"license-cop\").getReadonlyRepository(repoName);\n    const fileContent = await repo.readFile(\".licenses.json\");\n\n    return json5Parse(fileContent);\n  } catch (e) {\n    throw new ConfigError(\n      `Could not resolve config from GitHub repo: ${repoId}, error: ${JSON.stringify(e)}`\n    );\n  }\n};\n"],"names":["githubResolution","repoId","logger","verbose","parts","split","length","ConfigError","owner","repoName","repo","GitHubClient","getReadonlyRepository","fileContent","readFile","json5Parse","e","JSON","stringify"],"mappings":";+BAKaA;;aAAAA;;+BALgB;wBACV;6BACS;uBACD;AAEpB,MAAMA,mBAAmB,OAAOC,SAAmB;IACxDC,eAAM,CAACC,OAAO,CAAC,CAAC,mCAAmC,EAAEF,OAAO,CAAC;IAE7D,MAAMG,QAAQH,OAAOI,KAAK,CAAC;IAE3B,IAAID,MAAME,MAAM,KAAK,KAAKF,KAAK,CAAC,EAAE,CAACE,MAAM,KAAK,KAAKF,KAAK,CAAC,EAAE,CAACE,MAAM,KAAK,GAAG;QACxE,MAAM,IAAIC,wBAAW,CAAC,CAAC,wBAAwB,EAAEN,OAAO,CAAC,EAAE;IAC7D,CAAC;IAED,MAAM,CAACO,OAAOC,SAAS,GAAGL;IAE1B,IAAI;QACF,MAAMM,OAAO,IAAIC,2BAAY,CAACH,OAAO,IAAI,eAAeI,qBAAqB,CAACH;QAC9E,MAAMI,cAAc,MAAMH,KAAKI,QAAQ,CAAC;QAExC,OAAOC,IAAAA,iBAAU,EAACF;IACpB,EAAE,OAAOG,GAAG;QACV,MAAM,IAAIT,wBAAW,CACnB,CAAC,2CAA2C,EAAEN,OAAO,SAAS,EAAEgB,KAAKC,SAAS,CAACF,GAAG,CAAC,EACnF;IACJ;AACF"}

package/src/lib/config/parent-resolutions/http.js

@@ -1,15 +1,13 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
 Object.defineProperty(exports, "httpResolution", {
     enumerable: true,
     get: ()=>httpResolution
 });
-const _interopRequireDefault = require("@swc/helpers/lib/_interop_require_default.js").default;
-const _axios = /*#__PURE__*/ _interopRequireDefault(require("axios"));
+const _axios = require("axios");
+const _logger = require("../../logger");
 const _json5 = require("../parsers/json5");
 const httpResolution = async (url)=>{
+    _logger.default.verbose(`Resolving http config: ${url}`);
     const response = await _axios.default.get(url);
     if (typeof response.data === "string") {
         return await (0, _json5.json5Parse)(response.data);

package/src/lib/config/parent-resolutions/http.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parent-resolutions/http.ts"],"sourcesContent":["import axios from \"axios\";\nimport { json5Parse } from \"../parsers/json5\";\n\nexport const httpResolution = async (url: string) => {\n  const response = await axios.get(url);\n\n  if (typeof response.data === \"string\") {\n    return await json5Parse(response.data);\n  }\n\n  return response.data;\n};\n"],"names":["httpResolution","url","response","axios","get","data","json5Parse"],"mappings":";;;;+BAGaA;;aAAAA;;;4DAHK;uBACS;AAEpB,MAAMA,iBAAiB,OAAOC,MAAgB;IACnD,MAAMC,WAAW,MAAMC,cAAK,CAACC,GAAG,CAACH;IAEjC,IAAI,OAAOC,SAASG,IAAI,KAAK,UAAU;QACrC,OAAO,MAAMC,IAAAA,iBAAU,EAACJ,SAASG,IAAI;IACvC,CAAC;IAED,OAAOH,SAASG,IAAI;AACtB"}
+{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parent-resolutions/http.ts"],"sourcesContent":["import axios from \"axios\";\nimport logger from \"../../logger\";\nimport { json5Parse } from \"../parsers/json5\";\n\nexport const httpResolution = async (url: string) => {\n  logger.verbose(`Resolving http config: ${url}`);\n\n  const response = await axios.get(url);\n\n  if (typeof response.data === \"string\") {\n    return await json5Parse(response.data);\n  }\n\n  return response.data;\n};\n"],"names":["httpResolution","url","logger","verbose","response","axios","get","data","json5Parse"],"mappings":";+BAIaA;;aAAAA;;uBAJK;wBACC;uBACQ;AAEpB,MAAMA,iBAAiB,OAAOC,MAAgB;IACnDC,eAAM,CAACC,OAAO,CAAC,CAAC,uBAAuB,EAAEF,IAAI,CAAC;IAE9C,MAAMG,WAAW,MAAMC,cAAK,CAACC,GAAG,CAACL;IAEjC,IAAI,OAAOG,SAASG,IAAI,KAAK,UAAU;QACrC,OAAO,MAAMC,IAAAA,iBAAU,EAACJ,SAASG,IAAI;IACvC,CAAC;IAED,OAAOH,SAASG,IAAI;AACtB"}

package/src/lib/config/parent-resolutions/npm.js

@@ -1,7 +1,4 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
 function _export(target, all) {
     for(var name in all)Object.defineProperty(target, name, {
         enumerable: true,
@@ -14,8 +11,10 @@ _export(exports, {
 });
 const _promises = require("fs/promises");
 const _path = require("path");
+const _logger = require("../../logger");
 const _findConfig = require("../find-config");
 const npmResolution = async (packageName, rootDir)=>{
+    _logger.default.verbose(`Resolving npm package: ${packageName}`);
     const packagePath = getPackagePath(rootDir, packageName);
     return await (0, _findConfig.findConfig)(packagePath);
 };

package/src/lib/config/parent-resolutions/npm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parent-resolutions/npm.ts"],"sourcesContent":["import { stat } from \"fs/promises\";\nimport { join } from \"path\";\nimport { findConfig } from \"../find-config\";\n\nexport const npmResolution = async (packageName: string, rootDir: string) => {\n  const packagePath = getPackagePath(rootDir, packageName);\n  return await findConfig(packagePath);\n};\n\nexport const nodeModuleExists = async (packageName: string, rootDir: string) => {\n  const packagePath = getPackagePath(rootDir, packageName);\n\n  const statResult = await stat(packagePath);\n  return statResult.isDirectory();\n};\n\nconst getPackagePath = (rootDir: string, packageName: string) =>\n  join(rootDir, \"node_modules\", packageName);\n"],"names":["npmResolution","nodeModuleExists","packageName","rootDir","packagePath","getPackagePath","findConfig","statResult","stat","isDirectory","join"],"mappings":";;;;;;;;;;;IAIaA,aAAa,MAAbA;IAKAC,gBAAgB,MAAhBA;;0BATQ;sBACA;4BACM;AAEpB,MAAMD,gBAAgB,OAAOE,aAAqBC,UAAoB;IAC3E,MAAMC,cAAcC,eAAeF,SAASD;IAC5C,OAAO,MAAMI,IAAAA,sBAAU,EAACF;AAC1B;AAEO,MAAMH,mBAAmB,OAAOC,aAAqBC,UAAoB;IAC9E,MAAMC,cAAcC,eAAeF,SAASD;IAE5C,MAAMK,aAAa,MAAMC,IAAAA,cAAI,EAACJ;IAC9B,OAAOG,WAAWE,WAAW;AAC/B;AAEA,MAAMJ,iBAAiB,CAACF,SAAiBD,cACvCQ,IAAAA,UAAI,EAACP,SAAS,gBAAgBD"}
+{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parent-resolutions/npm.ts"],"sourcesContent":["import { stat } from \"fs/promises\";\nimport { join } from \"path\";\nimport logger from \"../../logger\";\nimport { findConfig } from \"../find-config\";\n\nexport const npmResolution = async (packageName: string, rootDir: string) => {\n  logger.verbose(`Resolving npm package: ${packageName}`);\n\n  const packagePath = getPackagePath(rootDir, packageName);\n  return await findConfig(packagePath);\n};\n\nexport const nodeModuleExists = async (packageName: string, rootDir: string) => {\n  const packagePath = getPackagePath(rootDir, packageName);\n\n  const statResult = await stat(packagePath);\n  return statResult.isDirectory();\n};\n\nconst getPackagePath = (rootDir: string, packageName: string) =>\n  join(rootDir, \"node_modules\", packageName);\n"],"names":["npmResolution","nodeModuleExists","packageName","rootDir","logger","verbose","packagePath","getPackagePath","findConfig","statResult","stat","isDirectory","join"],"mappings":";;;;;;;;IAKaA,aAAa,MAAbA;IAOAC,gBAAgB,MAAhBA;;0BAZQ;sBACA;wBACF;4BACQ;AAEpB,MAAMD,gBAAgB,OAAOE,aAAqBC,UAAoB;IAC3EC,eAAM,CAACC,OAAO,CAAC,CAAC,uBAAuB,EAAEH,YAAY,CAAC;IAEtD,MAAMI,cAAcC,eAAeJ,SAASD;IAC5C,OAAO,MAAMM,IAAAA,sBAAU,EAACF;AAC1B;AAEO,MAAML,mBAAmB,OAAOC,aAAqBC,UAAoB;IAC9E,MAAMG,cAAcC,eAAeJ,SAASD;IAE5C,MAAMO,aAAa,MAAMC,IAAAA,cAAI,EAACJ;IAC9B,OAAOG,WAAWE,WAAW;AAC/B;AAEA,MAAMJ,iBAAiB,CAACJ,SAAiBD,cACvCU,IAAAA,UAAI,EAACT,SAAS,gBAAgBD"}

package/src/lib/config/parsers/json5.js

@@ -1,13 +1,9 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
 Object.defineProperty(exports, "json5Parse", {
     enumerable: true,
     get: ()=>json5Parse
 });
-const _interopRequireDefault = require("@swc/helpers/lib/_interop_require_default.js").default;
-const _json5 = /*#__PURE__*/ _interopRequireDefault(require("json5"));
-const json5Parse = (content)=>_json5.default.parse(content);
+const _json5 = require("json5");
+const json5Parse = (content)=>_json5.parse(content);
 
 //# sourceMappingURL=json5.js.map

package/src/lib/config/parsers/json5.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parsers/json5.ts"],"sourcesContent":["import JSON5 from \"json5\";\n\nexport const json5Parse = <T>(content: string): T => JSON5.parse<T>(content);\n"],"names":["json5Parse","content","JSON5","parse"],"mappings":";;;;+BAEaA;;aAAAA;;;4DAFK;AAEX,MAAMA,aAAa,CAAIC,UAAuBC,cAAK,CAACC,KAAK,CAAIF"}
+{"version":3,"sources":["../../../../../../../packages/license-cop/src/lib/config/parsers/json5.ts"],"sourcesContent":["import * as JSON5 from \"json5\";\n\nexport const json5Parse = <T>(content: string): T => JSON5.parse<T>(content);\n"],"names":["json5Parse","content","JSON5","parse"],"mappings":";+BAEaA;;aAAAA;;uBAFU;AAEhB,MAAMA,aAAa,CAAIC,UAAuBC,OAAMC,KAAK,CAAIF"}

package/src/lib/license-cop.d.ts

@@ -1,3 +1,4 @@
+import { CheckLicensesResult } from "./result";
 export interface LicenseCopOptions {
     allowedLicenses: string[];
     allowedPackages: string[];
@@ -5,4 +6,4 @@ export interface LicenseCopOptions {
     includeDevDependencies?: boolean;
     devDependenciesOnly?: boolean;
 }
-export declare const checkLicenses: (options: LicenseCopOptions) => Promise<void>;
+export declare const checkLicenses: (options: LicenseCopOptions) => Promise<CheckLicensesResult>;

package/src/lib/license-cop.js

@@ -1,60 +1,93 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
 Object.defineProperty(exports, "checkLicenses", {
     enumerable: true,
     get: ()=>checkLicenses
 });
-const _interopRequireDefault = require("@swc/helpers/lib/_interop_require_default.js").default;
-const _arborist = /*#__PURE__*/ _interopRequireDefault(require("@npmcli/arborist"));
+const _arborist = require("@npmcli/arborist");
 const _path = require("path");
+const _logger = require("./logger");
 const _packageJson = require("./package-json");
 const _packageRules = require("./package-rules");
-const _violationsError = require("./violations-error");
+const _calculateIssues = require("./spdx/calculate-issues");
+const _joinStringArray = require("./utils/join-string-array");
+const _parseLicenseExpression = require("./spdx/parse-license-expression");
 const checkLicenses = async (options)=>{
     const { workingDirectory , allowedLicenses , allowedPackages , includeDevDependencies , devDependenciesOnly  } = options;
-    const allLicenses = new Set();
-    const packageViolations = new Set();
+    const foundAllowedPackages = new Set();
+    const packagesWithAllowedLicenses = new Set();
+    const packagesWithNoLicenses = new Set();
+    const packagesWithForbiddenLicenses = new Set();
     const path = resolvePath(workingDirectory);
-    const arborist = new _arborist.default({
+    const arborist = new _arborist({
         path
     });
     const topNode = await arborist.loadActual();
-    console.log("Scanning dependencies of:", topNode.name);
-    const parseNodes = async (nodes)=>{
-        for (const node of nodes){
-            const isDevDependency = node.dev || node.devOptional;
-            if (!includeDevDependencies && !devDependenciesOnly && isDevDependency) {
-                continue;
-            }
-            if (devDependenciesOnly && !isDevDependency) {
-                continue;
-            }
-            const packageJsonPath = (0, _path.join)(node.realpath, "package.json");
-            const packageJson = await (0, _packageJson.readPackageJson)(packageJsonPath);
-            var _packageJson_license;
-            const license = (_packageJson_license = packageJson.license) != null ? _packageJson_license : "UNLICENSED";
-            allLicenses.add(license);
-            if ((0, _packageRules.isAllowedPackage)(node.name, packageJson.version, allowedPackages)) {
-                continue;
-            }
-            if (!(0, _packageRules.isAllowedLicense)(license, allowedLicenses)) {
-                packageViolations.add({
-                    packageName: node.name,
-                    packageVersion: packageJson.version,
-                    license
-                });
+    const parseNode = async (node)=>{
+        _logger.default.verbose(`Parsing node: ${node.name}`);
+        const isDevDependency = node.dev;
+        if (!includeDevDependencies && !devDependenciesOnly && isDevDependency) {
+            return;
+        }
+        if (devDependenciesOnly && !isDevDependency) {
+            return;
+        }
+        const packageJsonPath = (0, _path.join)(node.realpath, "package.json");
+        const packageJson = await (0, _packageJson.readPackageJson)(packageJsonPath);
+        if ((0, _packageRules.isAllowedPackage)(node.name, packageJson.version, allowedPackages)) {
+            foundAllowedPackages.add({
+                name: packageJson.name,
+                version: packageJson.version
+            });
+            if (node.children.size > 0) {
+                await parseNodes(node.children.values());
             }
+            return;
+        }
+        const rawLicenseExpression = (0, _packageJson.getLicenseExpression)(packageJson);
+        const licenseExpression = (0, _parseLicenseExpression.parseLicenseExpression)(rawLicenseExpression);
+        if (licenseExpression.type === "unlicensed") {
+            packagesWithNoLicenses.add({
+                name: packageJson.name,
+                version: packageJson.version
+            });
             if (node.children.size > 0) {
-                parseNodes(node.children.values());
+                await parseNodes(node.children.values());
             }
+            return;
+        }
+        const licenseIssues = (0, _calculateIssues.calculateIssues)(licenseExpression, allowedLicenses);
+        const joinedIssues = (0, _joinStringArray.joinStringArray)(licenseIssues);
+        if (licenseIssues.length > 0) {
+            packagesWithForbiddenLicenses.add({
+                name: packageJson.name,
+                version: packageJson.version,
+                licenseIdentifiers: joinedIssues,
+                spdxExpression: rawLicenseExpression
+            });
+        } else {
+            packagesWithAllowedLicenses.add({
+                name: packageJson.name,
+                version: packageJson.version,
+                spdxExpression: rawLicenseExpression,
+                licenses: licenseExpression
+            });
+        }
+        if (node.children.size > 0) {
+            parseNodes(node.children.values());
+        }
+    };
+    const parseNodes = async (nodes)=>{
+        for (const node of nodes){
+            await parseNode(node);
         }
     };
     await parseNodes(topNode.children.values());
-    if (packageViolations.size > 0) {
-        throw new _violationsError.ViolationsError(packageViolations);
-    }
+    return {
+        allowedPackages: foundAllowedPackages,
+        allowedLicenses: packagesWithAllowedLicenses,
+        noLicenses: packagesWithNoLicenses,
+        forbiddenLicenses: packagesWithForbiddenLicenses
+    };
 };
 const resolvePath = (path)=>{
     if (!path) {

package/src/lib/license-cop.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/license-cop/src/lib/license-cop.ts"],"sourcesContent":["import Arborist, { Node, Link } from \"@npmcli/arborist\";\nimport { isAbsolute, join } from \"path\";\nimport { readPackageJson } from \"./package-json\";\nimport { isAllowedLicense, isAllowedPackage } from \"./package-rules\";\nimport { Violation, ViolationsError } from \"./violations-error\";\n\nexport interface LicenseCopOptions {\n  allowedLicenses: string[];\n  allowedPackages: string[];\n  workingDirectory?: string;\n  includeDevDependencies?: boolean;\n  devDependenciesOnly?: boolean;\n}\n\nexport const checkLicenses = async (options: LicenseCopOptions): Promise<void> => {\n  const {\n    workingDirectory,\n    allowedLicenses,\n    allowedPackages,\n    includeDevDependencies,\n    devDependenciesOnly\n  } = options;\n\n  const allLicenses = new Set<string>();\n  const packageViolations = new Set<Violation>();\n\n  const path = resolvePath(workingDirectory);\n\n  const arborist = new Arborist({\n    path\n  });\n\n  const topNode = await arborist.loadActual();\n\n  console.log(\"Scanning dependencies of:\", topNode.name);\n\n  const parseNodes = async (nodes: IterableIterator<Node | Link>) => {\n    for (const node of nodes) {\n      const isDevDependency = node.dev || node.devOptional;\n\n      if (!includeDevDependencies && !devDependenciesOnly && isDevDependency) {\n        continue;\n      }\n\n      if (devDependenciesOnly && !isDevDependency) {\n        continue;\n      }\n\n      const packageJsonPath = join(node.realpath, \"package.json\");\n      const packageJson = await readPackageJson(packageJsonPath);\n\n      const license = packageJson.license ?? \"UNLICENSED\";\n\n      allLicenses.add(license);\n\n      if (isAllowedPackage(node.name, packageJson.version, allowedPackages)) {\n        continue;\n      }\n\n      if (!isAllowedLicense(license, allowedLicenses)) {\n        packageViolations.add({\n          packageName: node.name,\n          packageVersion: packageJson.version,\n          license\n        });\n      }\n\n      if (node.children.size > 0) {\n        parseNodes(node.children.values());\n      }\n    }\n  };\n\n  await parseNodes(topNode.children.values());\n\n  if (packageViolations.size > 0) {\n    throw new ViolationsError(packageViolations);\n  }\n};\n\nconst resolvePath = (path?: string): string => {\n  if (!path) {\n    return process.cwd();\n  }\n\n  return isAbsolute(path) ? path : join(process.cwd(), path);\n};\n"],"names":["checkLicenses","options","workingDirectory","allowedLicenses","allowedPackages","includeDevDependencies","devDependenciesOnly","allLicenses","Set","packageViolations","path","resolvePath","arborist","Arborist","topNode","loadActual","console","log","name","parseNodes","nodes","node","isDevDependency","dev","devOptional","packageJsonPath","join","realpath","packageJson","readPackageJson","license","add","isAllowedPackage","version","isAllowedLicense","packageName","packageVersion","children","size","values","ViolationsError","process","cwd","isAbsolute"],"mappings":";;;;+BAcaA;;aAAAA;;;+DAdwB;sBACJ;6BACD;8BACmB;iCACR;AAUpC,MAAMA,gBAAgB,OAAOC,UAA8C;IAChF,MAAM,EACJC,iBAAgB,EAChBC,gBAAe,EACfC,gBAAe,EACfC,uBAAsB,EACtBC,oBAAmB,EACpB,GAAGL;IAEJ,MAAMM,cAAc,IAAIC;IACxB,MAAMC,oBAAoB,IAAID;IAE9B,MAAME,OAAOC,YAAYT;IAEzB,MAAMU,WAAW,IAAIC,iBAAQ,CAAC;QAC5BH;IACF;IAEA,MAAMI,UAAU,MAAMF,SAASG,UAAU;IAEzCC,QAAQC,GAAG,CAAC,6BAA6BH,QAAQI,IAAI;IAErD,MAAMC,aAAa,OAAOC,QAAyC;QACjE,KAAK,MAAMC,QAAQD,MAAO;YACxB,MAAME,kBAAkBD,KAAKE,GAAG,IAAIF,KAAKG,WAAW;YAEpD,IAAI,CAACnB,0BAA0B,CAACC,uBAAuBgB,iBAAiB;gBACtE,QAAS;YACX,CAAC;YAED,IAAIhB,uBAAuB,CAACgB,iBAAiB;gBAC3C,QAAS;YACX,CAAC;YAED,MAAMG,kBAAkBC,IAAAA,UAAI,EAACL,KAAKM,QAAQ,EAAE;YAC5C,MAAMC,cAAc,MAAMC,IAAAA,4BAAe,EAACJ;gBAE1BG;YAAhB,MAAME,UAAUF,CAAAA,uBAAAA,YAAYE,OAAO,YAAnBF,uBAAuB,YAAY;YAEnDrB,YAAYwB,GAAG,CAACD;YAEhB,IAAIE,IAAAA,8BAAgB,EAACX,KAAKH,IAAI,EAAEU,YAAYK,OAAO,EAAE7B,kBAAkB;gBACrE,QAAS;YACX,CAAC;YAED,IAAI,CAAC8B,IAAAA,8BAAgB,EAACJ,SAAS3B,kBAAkB;gBAC/CM,kBAAkBsB,GAAG,CAAC;oBACpBI,aAAad,KAAKH,IAAI;oBACtBkB,gBAAgBR,YAAYK,OAAO;oBACnCH;gBACF;YACF,CAAC;YAED,IAAIT,KAAKgB,QAAQ,CAACC,IAAI,GAAG,GAAG;gBAC1BnB,WAAWE,KAAKgB,QAAQ,CAACE,MAAM;YACjC,CAAC;QACH;IACF;IAEA,MAAMpB,WAAWL,QAAQuB,QAAQ,CAACE,MAAM;IAExC,IAAI9B,kBAAkB6B,IAAI,GAAG,GAAG;QAC9B,MAAM,IAAIE,gCAAe,CAAC/B,mBAAmB;IAC/C,CAAC;AACH;AAEA,MAAME,cAAc,CAACD,OAA0B;IAC7C,IAAI,CAACA,MAAM;QACT,OAAO+B,QAAQC,GAAG;IACpB,CAAC;IAED,OAAOC,IAAAA,gBAAU,EAACjC,QAAQA,OAAOgB,IAAAA,UAAI,EAACe,QAAQC,GAAG,IAAIhC,KAAK;AAC5D"}
+{"version":3,"sources":["../../../../../packages/license-cop/src/lib/license-cop.ts"],"sourcesContent":["import { Node, Link } from \"@npmcli/arborist\";\nimport * as Arborist from \"@npmcli/arborist\";\nimport { isAbsolute, join } from \"path\";\nimport logger from \"./logger\";\nimport { getLicenseExpression, readPackageJson } from \"./package-json\";\nimport { isAllowedPackage } from \"./package-rules\";\nimport { calculateIssues } from \"./spdx/calculate-issues\";\nimport { joinStringArray } from \"./utils/join-string-array\";\nimport { parseLicenseExpression } from \"./spdx/parse-license-expression\";\nimport {\n  AllowedPackage,\n  CheckLicensesResult,\n  ForbiddenLicenseResult,\n  LicensedPackage,\n  NoLicenseResult\n} from \"./result\";\n\nexport interface LicenseCopOptions {\n  allowedLicenses: string[];\n  allowedPackages: string[];\n  workingDirectory?: string;\n  includeDevDependencies?: boolean;\n  devDependenciesOnly?: boolean;\n}\n\nexport const checkLicenses = async (options: LicenseCopOptions): Promise<CheckLicensesResult> => {\n  const {\n    workingDirectory,\n    allowedLicenses,\n    allowedPackages,\n    includeDevDependencies,\n    devDependenciesOnly\n  } = options;\n\n  const foundAllowedPackages = new Set<AllowedPackage>();\n  const packagesWithAllowedLicenses = new Set<LicensedPackage>();\n  const packagesWithNoLicenses = new Set<NoLicenseResult>();\n  const packagesWithForbiddenLicenses = new Set<ForbiddenLicenseResult>();\n\n  const path = resolvePath(workingDirectory);\n  const arborist = new Arborist({ path });\n\n  const topNode = await arborist.loadActual();\n\n  const parseNode = async (node: Node | Link) => {\n    logger.verbose(`Parsing node: ${node.name}`);\n\n    const isDevDependency = node.dev;\n\n    if (!includeDevDependencies && !devDependenciesOnly && isDevDependency) {\n      return;\n    }\n\n    if (devDependenciesOnly && !isDevDependency) {\n      return;\n    }\n\n    const packageJsonPath = join(node.realpath, \"package.json\");\n    const packageJson = await readPackageJson(packageJsonPath);\n\n    if (isAllowedPackage(node.name, packageJson.version, allowedPackages)) {\n      foundAllowedPackages.add({\n        name: packageJson.name,\n        version: packageJson.version\n      });\n\n      if (node.children.size > 0) {\n        await parseNodes(node.children.values());\n      }\n      return;\n    }\n\n    const rawLicenseExpression = getLicenseExpression(packageJson);\n    const licenseExpression = parseLicenseExpression(rawLicenseExpression);\n\n    if (licenseExpression.type === \"unlicensed\") {\n      packagesWithNoLicenses.add({\n        name: packageJson.name,\n        version: packageJson.version\n      });\n\n      if (node.children.size > 0) {\n        await parseNodes(node.children.values());\n      }\n      return;\n    }\n\n    const licenseIssues = calculateIssues(licenseExpression, allowedLicenses);\n    const joinedIssues = joinStringArray(licenseIssues);\n\n    if (licenseIssues.length > 0) {\n      packagesWithForbiddenLicenses.add({\n        name: packageJson.name,\n        version: packageJson.version,\n        licenseIdentifiers: joinedIssues,\n        spdxExpression: rawLicenseExpression\n      });\n    } else {\n      packagesWithAllowedLicenses.add({\n        name: packageJson.name,\n        version: packageJson.version,\n        spdxExpression: rawLicenseExpression,\n        licenses: licenseExpression\n      });\n    }\n\n    if (node.children.size > 0) {\n      parseNodes(node.children.values());\n    }\n  };\n\n  const parseNodes = async (nodes: IterableIterator<Node | Link>) => {\n    for (const node of nodes) {\n      await parseNode(node);\n    }\n  };\n\n  await parseNodes(topNode.children.values());\n\n  return {\n    allowedPackages: foundAllowedPackages,\n    allowedLicenses: packagesWithAllowedLicenses,\n    noLicenses: packagesWithNoLicenses,\n    forbiddenLicenses: packagesWithForbiddenLicenses\n  };\n};\n\nconst resolvePath = (path?: string): string => {\n  if (!path) {\n    return process.cwd();\n  }\n\n  return isAbsolute(path) ? path : join(process.cwd(), path);\n};\n"],"names":["checkLicenses","options","workingDirectory","allowedLicenses","allowedPackages","includeDevDependencies","devDependenciesOnly","foundAllowedPackages","Set","packagesWithAllowedLicenses","packagesWithNoLicenses","packagesWithForbiddenLicenses","path","resolvePath","arborist","Arborist","topNode","loadActual","parseNode","node","logger","verbose","name","isDevDependency","dev","packageJsonPath","join","realpath","packageJson","readPackageJson","isAllowedPackage","version","add","children","size","parseNodes","values","rawLicenseExpression","getLicenseExpression","licenseExpression","parseLicenseExpression","type","licenseIssues","calculateIssues","joinedIssues","joinStringArray","length","licenseIdentifiers","spdxExpression","licenses","nodes","noLicenses","forbiddenLicenses","process","cwd","isAbsolute"],"mappings":";+BAyBaA;;aAAAA;;0BAxBa;sBACO;wBACd;6BACmC;8BACrB;iCACD;iCACA;wCACO;AAiBhC,MAAMA,gBAAgB,OAAOC,UAA6D;IAC/F,MAAM,EACJC,iBAAgB,EAChBC,gBAAe,EACfC,gBAAe,EACfC,uBAAsB,EACtBC,oBAAmB,EACpB,GAAGL;IAEJ,MAAMM,uBAAuB,IAAIC;IACjC,MAAMC,8BAA8B,IAAID;IACxC,MAAME,yBAAyB,IAAIF;IACnC,MAAMG,gCAAgC,IAAIH;IAE1C,MAAMI,OAAOC,YAAYX;IACzB,MAAMY,WAAW,IAAIC,UAAS;QAAEH;IAAK;IAErC,MAAMI,UAAU,MAAMF,SAASG,UAAU;IAEzC,MAAMC,YAAY,OAAOC,OAAsB;QAC7CC,eAAM,CAACC,OAAO,CAAC,CAAC,cAAc,EAAEF,KAAKG,IAAI,CAAC,CAAC;QAE3C,MAAMC,kBAAkBJ,KAAKK,GAAG;QAEhC,IAAI,CAACnB,0BAA0B,CAACC,uBAAuBiB,iBAAiB;YACtE;QACF,CAAC;QAED,IAAIjB,uBAAuB,CAACiB,iBAAiB;YAC3C;QACF,CAAC;QAED,MAAME,kBAAkBC,IAAAA,UAAI,EAACP,KAAKQ,QAAQ,EAAE;QAC5C,MAAMC,cAAc,MAAMC,IAAAA,4BAAe,EAACJ;QAE1C,IAAIK,IAAAA,8BAAgB,EAACX,KAAKG,IAAI,EAAEM,YAAYG,OAAO,EAAE3B,kBAAkB;YACrEG,qBAAqByB,GAAG,CAAC;gBACvBV,MAAMM,YAAYN,IAAI;gBACtBS,SAASH,YAAYG,OAAO;YAC9B;YAEA,IAAIZ,KAAKc,QAAQ,CAACC,IAAI,GAAG,GAAG;gBAC1B,MAAMC,WAAWhB,KAAKc,QAAQ,CAACG,MAAM;YACvC,CAAC;YACD;QACF,CAAC;QAED,MAAMC,uBAAuBC,IAAAA,iCAAoB,EAACV;QAClD,MAAMW,oBAAoBC,IAAAA,8CAAsB,EAACH;QAEjD,IAAIE,kBAAkBE,IAAI,KAAK,cAAc;YAC3C/B,uBAAuBsB,GAAG,CAAC;gBACzBV,MAAMM,YAAYN,IAAI;gBACtBS,SAASH,YAAYG,OAAO;YAC9B;YAEA,IAAIZ,KAAKc,QAAQ,CAACC,IAAI,GAAG,GAAG;gBAC1B,MAAMC,WAAWhB,KAAKc,QAAQ,CAACG,MAAM;YACvC,CAAC;YACD;QACF,CAAC;QAED,MAAMM,gBAAgBC,IAAAA,gCAAe,EAACJ,mBAAmBpC;QACzD,MAAMyC,eAAeC,IAAAA,gCAAe,EAACH;QAErC,IAAIA,cAAcI,MAAM,GAAG,GAAG;YAC5BnC,8BAA8BqB,GAAG,CAAC;gBAChCV,MAAMM,YAAYN,IAAI;gBACtBS,SAASH,YAAYG,OAAO;gBAC5BgB,oBAAoBH;gBACpBI,gBAAgBX;YAClB;QACF,OAAO;YACL5B,4BAA4BuB,GAAG,CAAC;gBAC9BV,MAAMM,YAAYN,IAAI;gBACtBS,SAASH,YAAYG,OAAO;gBAC5BiB,gBAAgBX;gBAChBY,UAAUV;YACZ;QACF,CAAC;QAED,IAAIpB,KAAKc,QAAQ,CAACC,IAAI,GAAG,GAAG;YAC1BC,WAAWhB,KAAKc,QAAQ,CAACG,MAAM;QACjC,CAAC;IACH;IAEA,MAAMD,aAAa,OAAOe,QAAyC;QACjE,KAAK,MAAM/B,QAAQ+B,MAAO;YACxB,MAAMhC,UAAUC;QAClB;IACF;IAEA,MAAMgB,WAAWnB,QAAQiB,QAAQ,CAACG,MAAM;IAExC,OAAO;QACLhC,iBAAiBG;QACjBJ,iBAAiBM;QACjB0C,YAAYzC;QACZ0C,mBAAmBzC;IACrB;AACF;AAEA,MAAME,cAAc,CAACD,OAA0B;IAC7C,IAAI,CAACA,MAAM;QACT,OAAOyC,QAAQC,GAAG;IACpB,CAAC;IAED,OAAOC,IAAAA,gBAAU,EAAC3C,QAAQA,OAAOc,IAAAA,UAAI,EAAC2B,QAAQC,GAAG,IAAI1C,KAAK;AAC5D"}

package/src/lib/logger.d.ts

@@ -0,0 +1,8 @@
+declare const logger: {
+    enableLogging: () => void;
+    enableVerboseLogging: () => void;
+    log: (message: string) => void;
+    verbose: (message: string) => void;
+    error: (message: string) => void;
+};
+export default logger;

package/src/lib/logger.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "default", {
+    enumerable: true,
+    get: ()=>_default
+});
+let loggerEnabled = false;
+let verboseEnabled = false;
+const enableLogging = ()=>{
+    loggerEnabled = true;
+};
+const enableVerboseLogging = ()=>{
+    verboseEnabled = true;
+    verbose("Verbose logging enabled");
+};
+const log = (message)=>{
+    if (loggerEnabled) {
+        console.log(message);
+    }
+};
+const verbose = (message)=>{
+    if (loggerEnabled && verboseEnabled) {
+        log(message);
+    }
+};
+const error = (message)=>{
+    if (loggerEnabled) {
+        console.error(message);
+    }
+};
+const logger = {
+    enableLogging,
+    enableVerboseLogging,
+    log,
+    verbose,
+    error
+};
+const _default = logger;
+
+//# sourceMappingURL=logger.js.map

package/src/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/license-cop/src/lib/logger.ts"],"sourcesContent":["let loggerEnabled = false;\nlet verboseEnabled = false;\n\nconst enableLogging = () => {\n  loggerEnabled = true;\n};\n\nconst enableVerboseLogging = () => {\n  verboseEnabled = true;\n\n  verbose(\"Verbose logging enabled\");\n};\n\nconst log = (message: string) => {\n  if (loggerEnabled) {\n    console.log(message);\n  }\n};\n\nconst verbose = (message: string) => {\n  if (loggerEnabled && verboseEnabled) {\n    log(message);\n  }\n};\n\nconst error = (message: string) => {\n  if (loggerEnabled) {\n    console.error(message);\n  }\n};\n\nconst logger = {\n  enableLogging,\n  enableVerboseLogging,\n  log,\n  verbose,\n  error\n};\n\nexport default logger;\n"],"names":["loggerEnabled","verboseEnabled","enableLogging","enableVerboseLogging","verbose","log","message","console","error","logger"],"mappings":";+BAuCA;;aAAA;;AAvCA,IAAIA,gBAAgB,KAAK;AACzB,IAAIC,iBAAiB,KAAK;AAE1B,MAAMC,gBAAgB,IAAM;IAC1BF,gBAAgB,IAAI;AACtB;AAEA,MAAMG,uBAAuB,IAAM;IACjCF,iBAAiB,IAAI;IAErBG,QAAQ;AACV;AAEA,MAAMC,MAAM,CAACC,UAAoB;IAC/B,IAAIN,eAAe;QACjBO,QAAQF,GAAG,CAACC;IACd,CAAC;AACH;AAEA,MAAMF,UAAU,CAACE,UAAoB;IACnC,IAAIN,iBAAiBC,gBAAgB;QACnCI,IAAIC;IACN,CAAC;AACH;AAEA,MAAME,QAAQ,CAACF,UAAoB;IACjC,IAAIN,eAAe;QACjBO,QAAQC,KAAK,CAACF;IAChB,CAAC;AACH;AAEA,MAAMG,SAAS;IACbP;IACAC;IACAE;IACAD;IACAI;AACF;MAEA,WAAeC"}

package/src/lib/package-json.d.ts

@@ -1,6 +1,36 @@
-interface PackageJson {
+import { z } from "zod";
+declare const packageJsonValidator: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    license: z.ZodOptional<z.ZodString>;
+    licenses: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodString;
+        url: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: string;
+        url?: string | undefined;
+    }, {
+        type: string;
+        url?: string | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
     version: string;
-    license?: string;
-}
+    license?: string | undefined;
+    licenses?: {
+        type: string;
+        url?: string | undefined;
+    }[] | undefined;
+}, {
+    name: string;
+    version: string;
+    license?: string | undefined;
+    licenses?: {
+        type: string;
+        url?: string | undefined;
+    }[] | undefined;
+}>;
+type PackageJson = z.infer<typeof packageJsonValidator>;
 export declare const readPackageJson: (pathToPackageJson: string) => Promise<PackageJson>;
+export declare const getLicenseExpression: (packageJson: PackageJson) => string;
 export {};

package/src/lib/package-json.js

@@ -1,22 +1,55 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "readPackageJson", {
-    enumerable: true,
-    get: ()=>readPackageJson
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    readPackageJson: ()=>readPackageJson,
+    getLicenseExpression: ()=>getLicenseExpression
 });
 const _promises = require("fs/promises");
+const _zod = require("zod");
+const _json5 = require("./config/parsers/json5");
+const _logger = require("./logger");
+const packageJsonValidator = _zod.z.object({
+    name: _zod.z.string(),
+    version: _zod.z.string(),
+    license: _zod.z.string().optional(),
+    licenses: _zod.z.object({
+        type: _zod.z.string(),
+        url: _zod.z.string().optional()
+    }).array().optional()
+});
 const readPackageJson = async (pathToPackageJson)=>{
     const doesPackageJsonExist = await doesFileExist(pathToPackageJson);
     if (!doesPackageJsonExist) {
+        _logger.default.verbose(`Cannot find the package.json: '${pathToPackageJson}'`);
         throw new Error(`Cannot find the file: '${pathToPackageJson}'`);
     }
     const packageJsonAsString = await (0, _promises.readFile)(pathToPackageJson, {
         encoding: "utf8"
     });
-    const packageJson = JSON.parse(packageJsonAsString);
-    return packageJson;
+    const parsedFile = (0, _json5.json5Parse)(packageJsonAsString);
+    const packageJson = packageJsonValidator.safeParse(parsedFile);
+    if (!packageJson.success) {
+        throw new Error(`Unable to parse package.json: ${pathToPackageJson}: ${packageJson.error.message}`);
+    }
+    return packageJson.data;
+};
+const getLicenseExpression = (packageJson)=>{
+    if (packageJson.license) {
+        return packageJson.license;
+    }
+    if (packageJson.licenses) {
+        const licenses = packageJson.licenses.map((license)=>license.type);
+        if (licenses.length === 1) {
+            return licenses[0];
+        }
+        return `(${licenses.join(" AND ")})`;
+    }
+    return "UNLICENSED";
 };
 const doesFileExist = async (path)=>{
     try {

package/src/lib/package-json.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/license-cop/src/lib/package-json.ts"],"sourcesContent":["import { Stats } from \"fs\";\nimport { readFile, stat } from \"fs/promises\";\n\ninterface PackageJson {\n  version: string;\n  license?: string;\n}\n\nexport const readPackageJson = async (pathToPackageJson: string): Promise<PackageJson> => {\n  const doesPackageJsonExist = await doesFileExist(pathToPackageJson);\n  if (!doesPackageJsonExist) {\n    throw new Error(`Cannot find the file: '${pathToPackageJson}'`);\n  }\n\n  const packageJsonAsString: string = await readFile(pathToPackageJson, { encoding: \"utf8\" });\n\n  const packageJson: PackageJson = JSON.parse(packageJsonAsString);\n  return packageJson;\n};\n\nconst doesFileExist = async (path: string): Promise<boolean> => {\n  try {\n    const stats: Stats = await stat(path);\n    return stats.isFile();\n  } catch {\n    return false;\n  }\n};\n"],"names":["readPackageJson","pathToPackageJson","doesPackageJsonExist","doesFileExist","Error","packageJsonAsString","readFile","encoding","packageJson","JSON","parse","path","stats","stat","isFile"],"mappings":";;;;+BAQaA;;aAAAA;;0BAPkB;AAOxB,MAAMA,kBAAkB,OAAOC,oBAAoD;IACxF,MAAMC,uBAAuB,MAAMC,cAAcF;IACjD,IAAI,CAACC,sBAAsB;QACzB,MAAM,IAAIE,MAAM,CAAC,uBAAuB,EAAEH,kBAAkB,CAAC,CAAC,EAAE;IAClE,CAAC;IAED,MAAMI,sBAA8B,MAAMC,IAAAA,kBAAQ,EAACL,mBAAmB;QAAEM,UAAU;IAAO;IAEzF,MAAMC,cAA2BC,KAAKC,KAAK,CAACL;IAC5C,OAAOG;AACT;AAEA,MAAML,gBAAgB,OAAOQ,OAAmC;IAC9D,IAAI;QACF,MAAMC,QAAe,MAAMC,IAAAA,cAAI,EAACF;QAChC,OAAOC,MAAME,MAAM;IACrB,EAAE,UAAM;QACN,OAAO,KAAK;IACd;AACF"}
+{"version":3,"sources":["../../../../../packages/license-cop/src/lib/package-json.ts"],"sourcesContent":["import { Stats } from \"fs\";\nimport { readFile, stat } from \"fs/promises\";\nimport { z } from \"zod\";\nimport { json5Parse } from \"./config/parsers/json5\";\nimport logger from \"./logger\";\n\nconst packageJsonValidator = z.object({\n  name: z.string(),\n  version: z.string(),\n  license: z.string().optional(),\n  licenses: z\n    .object({\n      type: z.string(),\n      url: z.string().optional()\n    })\n    .array()\n    .optional()\n});\n\ntype PackageJson = z.infer<typeof packageJsonValidator>;\n\nexport const readPackageJson = async (pathToPackageJson: string): Promise<PackageJson> => {\n  const doesPackageJsonExist = await doesFileExist(pathToPackageJson);\n  if (!doesPackageJsonExist) {\n    logger.verbose(`Cannot find the package.json: '${pathToPackageJson}'`);\n    throw new Error(`Cannot find the file: '${pathToPackageJson}'`);\n  }\n\n  const packageJsonAsString: string = await readFile(pathToPackageJson, { encoding: \"utf8\" });\n\n  const parsedFile = json5Parse<unknown>(packageJsonAsString);\n\n  const packageJson = packageJsonValidator.safeParse(parsedFile);\n\n  if (!packageJson.success) {\n    throw new Error(\n      `Unable to parse package.json: ${pathToPackageJson}: ${packageJson.error.message}`\n    );\n  }\n\n  return packageJson.data;\n};\n\nexport const getLicenseExpression = (packageJson: PackageJson): string => {\n  if (packageJson.license) {\n    return packageJson.license;\n  }\n\n  if (packageJson.licenses) {\n    const licenses = packageJson.licenses.map<string>(license => license.type);\n\n    if (licenses.length === 1) {\n      return licenses[0];\n    }\n\n    return `(${licenses.join(\" AND \")})`;\n  }\n\n  return \"UNLICENSED\";\n};\n\nconst doesFileExist = async (path: string): Promise<boolean> => {\n  try {\n    const stats: Stats = await stat(path);\n    return stats.isFile();\n  } catch {\n    return false;\n  }\n};\n"],"names":["readPackageJson","getLicenseExpression","packageJsonValidator","z","object","name","string","version","license","optional","licenses","type","url","array","pathToPackageJson","doesPackageJsonExist","doesFileExist","logger","verbose","Error","packageJsonAsString","readFile","encoding","parsedFile","json5Parse","packageJson","safeParse","success","error","message","data","map","length","join","path","stats","stat","isFile"],"mappings":";;;;;;;;IAqBaA,eAAe,MAAfA;IAsBAC,oBAAoB,MAApBA;;0BA1CkB;qBACb;uBACS;wBACR;AAEnB,MAAMC,uBAAuBC,MAAC,CAACC,MAAM,CAAC;IACpCC,MAAMF,MAAC,CAACG,MAAM;IACdC,SAASJ,MAAC,CAACG,MAAM;IACjBE,SAASL,MAAC,CAACG,MAAM,GAAGG,QAAQ;IAC5BC,UAAUP,MAAC,CACRC,MAAM,CAAC;QACNO,MAAMR,MAAC,CAACG,MAAM;QACdM,KAAKT,MAAC,CAACG,MAAM,GAAGG,QAAQ;IAC1B,GACCI,KAAK,GACLJ,QAAQ;AACb;AAIO,MAAMT,kBAAkB,OAAOc,oBAAoD;IACxF,MAAMC,uBAAuB,MAAMC,cAAcF;IACjD,IAAI,CAACC,sBAAsB;QACzBE,eAAM,CAACC,OAAO,CAAC,CAAC,+BAA+B,EAAEJ,kBAAkB,CAAC,CAAC;QACrE,MAAM,IAAIK,MAAM,CAAC,uBAAuB,EAAEL,kBAAkB,CAAC,CAAC,EAAE;IAClE,CAAC;IAED,MAAMM,sBAA8B,MAAMC,IAAAA,kBAAQ,EAACP,mBAAmB;QAAEQ,UAAU;IAAO;IAEzF,MAAMC,aAAaC,IAAAA,iBAAU,EAAUJ;IAEvC,MAAMK,cAAcvB,qBAAqBwB,SAAS,CAACH;IAEnD,IAAI,CAACE,YAAYE,OAAO,EAAE;QACxB,MAAM,IAAIR,MACR,CAAC,8BAA8B,EAAEL,kBAAkB,EAAE,EAAEW,YAAYG,KAAK,CAACC,OAAO,CAAC,CAAC,EAClF;IACJ,CAAC;IAED,OAAOJ,YAAYK,IAAI;AACzB;AAEO,MAAM7B,uBAAuB,CAACwB,cAAqC;IACxE,IAAIA,YAAYjB,OAAO,EAAE;QACvB,OAAOiB,YAAYjB,OAAO;IAC5B,CAAC;IAED,IAAIiB,YAAYf,QAAQ,EAAE;QACxB,MAAMA,WAAWe,YAAYf,QAAQ,CAACqB,GAAG,CAASvB,CAAAA,UAAWA,QAAQG,IAAI;QAEzE,IAAID,SAASsB,MAAM,KAAK,GAAG;YACzB,OAAOtB,QAAQ,CAAC,EAAE;QACpB,CAAC;QAED,OAAO,CAAC,CAAC,EAAEA,SAASuB,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;AACT;AAEA,MAAMjB,gBAAgB,OAAOkB,OAAmC;IAC9D,IAAI;QACF,MAAMC,QAAe,MAAMC,IAAAA,cAAI,EAACF;QAChC,OAAOC,MAAME,MAAM;IACrB,EAAE,UAAM;QACN,OAAO,KAAK;IACd;AACF"}

package/src/lib/package-rules.d.ts

@@ -1,2 +1 @@
 export declare const isAllowedPackage: (packageName: string, packageVersion: string, allowedPackages: string[]) => boolean;
-export declare const isAllowedLicense: (license: string, allowedLicenses: string[]) => boolean;

package/src/lib/package-rules.js

@@ -1,16 +1,7 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: all[name]
-    });
-}
-_export(exports, {
-    isAllowedPackage: ()=>isAllowedPackage,
-    isAllowedLicense: ()=>isAllowedLicense
+Object.defineProperty(exports, "isAllowedPackage", {
+    enumerable: true,
+    get: ()=>isAllowedPackage
 });
 const _compareVersions = require("compare-versions");
 const isAllowedPackage = (packageName, packageVersion, allowedPackages)=>{
@@ -27,8 +18,5 @@ const isAllowedPackage = (packageName, packageVersion, allowedPackages)=>{
     }
     return false;
 };
-const isAllowedLicense = (license, allowedLicenses)=>{
-    return allowedLicenses.includes(license);
-};
 
 //# sourceMappingURL=package-rules.js.map

package/src/lib/package-rules.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/license-cop/src/lib/package-rules.ts"],"sourcesContent":["import { satisfies } from \"compare-versions\";\n\nexport const isAllowedPackage = (\n  packageName: string,\n  packageVersion: string,\n  allowedPackages: string[]\n) => {\n  for (const allowedPackage of allowedPackages) {\n    if (allowedPackage === packageName) {\n      return true;\n    }\n\n    if (allowedPackage.startsWith(packageName + \"@\")) {\n      const allowedPackageVersion = allowedPackage.substring(packageName.length + 1);\n\n      if (satisfies(packageVersion, allowedPackageVersion)) {\n        return true;\n      }\n    }\n  }\n\n  return false;\n};\n\nexport const isAllowedLicense = (license: string, allowedLicenses: string[]) => {\n  return allowedLicenses.includes(license);\n};\n"],"names":["isAllowedPackage","isAllowedLicense","packageName","packageVersion","allowedPackages","allowedPackage","startsWith","allowedPackageVersion","substring","length","satisfies","license","allowedLicenses","includes"],"mappings":";;;;;;;;;;;IAEaA,gBAAgB,MAAhBA;IAsBAC,gBAAgB,MAAhBA;;iCAxBa;AAEnB,MAAMD,mBAAmB,CAC9BE,aACAC,gBACAC,kBACG;IACH,KAAK,MAAMC,kBAAkBD,gBAAiB;QAC5C,IAAIC,mBAAmBH,aAAa;YAClC,OAAO,IAAI;QACb,CAAC;QAED,IAAIG,eAAeC,UAAU,CAACJ,cAAc,MAAM;YAChD,MAAMK,wBAAwBF,eAAeG,SAAS,CAACN,YAAYO,MAAM,GAAG;YAE5E,IAAIC,IAAAA,0BAAS,EAACP,gBAAgBI,wBAAwB;gBACpD,OAAO,IAAI;YACb,CAAC;QACH,CAAC;IACH;IAEA,OAAO,KAAK;AACd;AAEO,MAAMN,mBAAmB,CAACU,SAAiBC,kBAA8B;IAC9E,OAAOA,gBAAgBC,QAAQ,CAACF;AAClC"}
+{"version":3,"sources":["../../../../../packages/license-cop/src/lib/package-rules.ts"],"sourcesContent":["import { satisfies } from \"compare-versions\";\n\nexport const isAllowedPackage = (\n  packageName: string,\n  packageVersion: string,\n  allowedPackages: string[]\n) => {\n  for (const allowedPackage of allowedPackages) {\n    if (allowedPackage === packageName) {\n      return true;\n    }\n\n    if (allowedPackage.startsWith(packageName + \"@\")) {\n      const allowedPackageVersion = allowedPackage.substring(packageName.length + 1);\n\n      if (satisfies(packageVersion, allowedPackageVersion)) {\n        return true;\n      }\n    }\n  }\n\n  return false;\n};\n"],"names":["isAllowedPackage","packageName","packageVersion","allowedPackages","allowedPackage","startsWith","allowedPackageVersion","substring","length","satisfies"],"mappings":";+BAEaA;;aAAAA;;iCAFa;AAEnB,MAAMA,mBAAmB,CAC9BC,aACAC,gBACAC,kBACG;IACH,KAAK,MAAMC,kBAAkBD,gBAAiB;QAC5C,IAAIC,mBAAmBH,aAAa;YAClC,OAAO,IAAI;QACb,CAAC;QAED,IAAIG,eAAeC,UAAU,CAACJ,cAAc,MAAM;YAChD,MAAMK,wBAAwBF,eAAeG,SAAS,CAACN,YAAYO,MAAM,GAAG;YAE5E,IAAIC,IAAAA,0BAAS,EAACP,gBAAgBI,wBAAwB;gBACpD,OAAO,IAAI;YACb,CAAC;QACH,CAAC;IACH;IAEA,OAAO,KAAK;AACd"}

package/src/lib/result.d.ts

@@ -0,0 +1,27 @@
+import { SpdxExpression } from "./spdx/types/spdx-expression";
+export interface CheckLicensesResult {
+    allowedPackages: Set<AllowedPackage>;
+    allowedLicenses: Set<LicensedPackage>;
+    noLicenses: Set<NoLicenseResult>;
+    forbiddenLicenses: Set<ForbiddenLicenseResult>;
+}
+export interface AllowedPackage {
+    name: string;
+    version: string;
+}
+export interface LicensedPackage {
+    name: string;
+    version: string;
+    spdxExpression: string;
+    licenses: SpdxExpression;
+}
+export interface NoLicenseResult {
+    name: string;
+    version: string;
+}
+export interface ForbiddenLicenseResult {
+    name: string;
+    version: string;
+    spdxExpression: string;
+    licenseIdentifiers: string;
+}

package/src/lib/result.js

@@ -0,0 +1,3 @@
+"use strict";
+
+//# sourceMappingURL=result.js.map

package/src/lib/result.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../packages/license-cop/src/lib/result.ts"],"names":[],"mappings":""}

package/src/lib/spdx/calculate-issues.d.ts

@@ -0,0 +1,2 @@
+import { SpdxExpression } from "./types/spdx-expression";
+export declare const calculateIssues: (license: SpdxExpression, allowedLicenses: string[]) => string[];