react-native-legal 1.8.0 → 1.9.0

package/android/gradle.properties

@@ -0,0 +1,7 @@
+ReactNativeLegal_androidGradlePluginVersion=8.12.0
+ReactNativeLegal_composeBomVersion=2025.11.01
+ReactNativeLegal_kotlinVersion=2.1.20
+ReactNativeLegal_compileSdkVersion=36
+ReactNativeLegal_minSdkVersion=21
+ReactNativeLegal_targetSdkVersion=35
+ReactNativeLegal_aboutLibrariesVersion=13.1.0

package/bare-plugin/build/android/androidCommand.d.ts

@@ -1,8 +1,8 @@
-import { type Types as SharedTypes } from '@callstack/licenses';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 /**
  * Implementation of bare plugin's Android/Android TV setup
  *
  * It scans the NPM dependencies, generates AboutLibraries-compatible metadata for them,
  * installs & configures AboutLibraries Gradle plugin and adds Android Activity with a list of dependencies and their licenses
  */
-export declare function androidCommand(androidProjectPath: string, scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory): void;
+export declare function androidCommand(androidProjectPath: string, { scanOptionsFactory, dependencySource, additionalProjectRoots }: PlatformPluginOptions): Promise<void>;

package/bare-plugin/build/android/androidCommand.js

@@ -7,6 +7,7 @@ exports.androidCommand = androidCommand;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const licenses_1 = require("@callstack/licenses");
+const common_1 = require("../../../plugin-utils/build/common");
 const addListActivity_1 = require("./addListActivity");
 const addResourceKeepFile_1 = require("./addResourceKeepFile");
 const applyAndConfigureAboutLibrariesPlugin_1 = require("./applyAndConfigureAboutLibrariesPlugin");
@@ -17,8 +18,14 @@ const declareAboutLibrariesPlugin_1 = require("./declareAboutLibrariesPlugin");
  * It scans the NPM dependencies, generates AboutLibraries-compatible metadata for them,
  * installs & configures AboutLibraries Gradle plugin and adds Android Activity with a list of dependencies and their licenses
  */
-function androidCommand(androidProjectPath, scanOptionsFactory) {
-    const licenses = (0, licenses_1.scanDependencies)(node_path_1.default.join(node_path_1.default.resolve(androidProjectPath, '..'), 'package.json'), scanOptionsFactory);
+async function androidCommand(androidProjectPath, { scanOptionsFactory, dependencySource, additionalProjectRoots }) {
+    const licenses = await (0, common_1.scanLicenses)({
+        projectRoot: node_path_1.default.resolve(androidProjectPath, '..'),
+        platform: 'android',
+        dependencySource,
+        scanOptionsFactory,
+        additionalProjectRoots,
+    });
     const aboutLibrariesConfigDirPath = node_path_1.default.join(androidProjectPath, 'config');
     // Cleanup metadata in case `scanOptionsFactory` changed
     node_fs_1.default.rmSync(aboutLibrariesConfigDirPath, { recursive: true, force: true });

package/bare-plugin/build/index.d.ts

@@ -1,3 +1,3 @@
 import type { PluginScanOptions } from '../../plugin-utils/build/types';
-declare function generateLegal(androidProjectPath: string | undefined, iosProjectPath: string | undefined, pluginScanOptions: PluginScanOptions): void;
+declare function generateLegal(androidProjectPath: string | undefined, iosProjectPath: string | undefined, pluginScanOptions: PluginScanOptions): Promise<void>;
 export default generateLegal;

package/bare-plugin/build/index.js

@@ -3,13 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const common_1 = require("../../plugin-utils/build/common");
 const androidCommand_1 = require("./android/androidCommand");
 const iosCommand_1 = require("./ios/iosCommand");
-function generateLegal(androidProjectPath, iosProjectPath, pluginScanOptions) {
+async function generateLegal(androidProjectPath, iosProjectPath, pluginScanOptions) {
     const scanOptionsFactory = (0, common_1.createPluginScanOptionsFactory)(pluginScanOptions);
+    const { dependencySource, additionalProjectRoots } = pluginScanOptions;
     if (androidProjectPath) {
-        (0, androidCommand_1.androidCommand)(androidProjectPath, scanOptionsFactory);
+        await (0, androidCommand_1.androidCommand)(androidProjectPath, { scanOptionsFactory, dependencySource, additionalProjectRoots });
     }
     if (iosProjectPath) {
-        (0, iosCommand_1.iosCommand)(iosProjectPath, scanOptionsFactory);
+        await (0, iosCommand_1.iosCommand)(iosProjectPath, { scanOptionsFactory, dependencySource, additionalProjectRoots });
     }
 }
 exports.default = generateLegal;

package/bare-plugin/build/ios/iosCommand.d.ts

@@ -1,8 +1,8 @@
-import { type Types as SharedTypes } from '@callstack/licenses';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 /**
  * Implementation of bare plugin's iOS/tvOS setup
  *
  * It scans the NPM dependencies, generates LicensePlist-compatible metadata for them,
  * configures Settings.bundle and registers a shell script generating LicensePlist metadata for iOS dependencies
  */
-export declare function iosCommand(iosProjectPath: string, scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory): void;
+export declare function iosCommand(iosProjectPath: string, { scanOptionsFactory, dependencySource, additionalProjectRoots }: PlatformPluginOptions): Promise<void>;

package/bare-plugin/build/ios/iosCommand.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.iosCommand = iosCommand;
 const node_path_1 = __importDefault(require("node:path"));
 const licenses_1 = require("@callstack/licenses");
+const common_1 = require("../../../plugin-utils/build/common");
 const addSettingsBundle_1 = require("./addSettingsBundle");
 const registerLicensePlistBuildPhase_1 = require("./registerLicensePlistBuildPhase");
 /**
@@ -14,8 +15,14 @@ const registerLicensePlistBuildPhase_1 = require("./registerLicensePlistBuildPha
  * It scans the NPM dependencies, generates LicensePlist-compatible metadata for them,
  * configures Settings.bundle and registers a shell script generating LicensePlist metadata for iOS dependencies
  */
-function iosCommand(iosProjectPath, scanOptionsFactory) {
-    const licenses = (0, licenses_1.scanDependencies)(node_path_1.default.join(node_path_1.default.resolve(iosProjectPath, '..'), 'package.json'), scanOptionsFactory);
+async function iosCommand(iosProjectPath, { scanOptionsFactory, dependencySource, additionalProjectRoots }) {
+    const licenses = await (0, common_1.scanLicenses)({
+        projectRoot: node_path_1.default.resolve(iosProjectPath, '..'),
+        platform: 'ios',
+        dependencySource,
+        scanOptionsFactory,
+        additionalProjectRoots,
+    });
     (0, licenses_1.writeLicensePlistNPMOutput)(licenses, iosProjectPath);
     (0, addSettingsBundle_1.addSettingsBundle)(iosProjectPath);
     (0, registerLicensePlistBuildPhase_1.registerLicensePlistBuildPhase)(iosProjectPath);

package/bare-plugin/src/android/androidCommand.ts

@@ -1,7 +1,10 @@
 import fs from 'node:fs';
 import path from 'node:path';
 
-import { type Types as SharedTypes, scanDependencies, writeAboutLibrariesNPMOutput } from '@callstack/licenses';
+import { writeAboutLibrariesNPMOutput } from '@callstack/licenses';
+
+import { scanLicenses } from '../../../plugin-utils/build/common';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 
 import { addListActivity } from './addListActivity';
 import { addResourceKeepFile } from './addResourceKeepFile';
@@ -14,11 +17,17 @@ import { declareAboutLibrariesPlugin } from './declareAboutLibrariesPlugin';
  * It scans the NPM dependencies, generates AboutLibraries-compatible metadata for them,
  * installs & configures AboutLibraries Gradle plugin and adds Android Activity with a list of dependencies and their licenses
  */
-export function androidCommand(androidProjectPath: string, scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory) {
-  const licenses = scanDependencies(
-    path.join(path.resolve(androidProjectPath, '..'), 'package.json'),
+export async function androidCommand(
+  androidProjectPath: string,
+  { scanOptionsFactory, dependencySource, additionalProjectRoots }: PlatformPluginOptions,
+): Promise<void> {
+  const licenses = await scanLicenses({
+    projectRoot: path.resolve(androidProjectPath, '..'),
+    platform: 'android',
+    dependencySource,
     scanOptionsFactory,
-  );
+    additionalProjectRoots,
+  });
 
   const aboutLibrariesConfigDirPath = path.join(androidProjectPath, 'config');
 

package/bare-plugin/src/index.ts

@@ -4,19 +4,20 @@ import type { PluginScanOptions } from '../../plugin-utils/build/types';
 import { androidCommand } from './android/androidCommand';
 import { iosCommand } from './ios/iosCommand';
 
-function generateLegal(
+async function generateLegal(
   androidProjectPath: string | undefined,
   iosProjectPath: string | undefined,
   pluginScanOptions: PluginScanOptions,
 ) {
   const scanOptionsFactory = createPluginScanOptionsFactory(pluginScanOptions);
+  const { dependencySource, additionalProjectRoots } = pluginScanOptions;
 
   if (androidProjectPath) {
-    androidCommand(androidProjectPath, scanOptionsFactory);
+    await androidCommand(androidProjectPath, { scanOptionsFactory, dependencySource, additionalProjectRoots });
   }
 
   if (iosProjectPath) {
-    iosCommand(iosProjectPath, scanOptionsFactory);
+    await iosCommand(iosProjectPath, { scanOptionsFactory, dependencySource, additionalProjectRoots });
   }
 }
 

package/bare-plugin/src/ios/iosCommand.ts

@@ -1,6 +1,9 @@
 import path from 'node:path';
 
-import { type Types as SharedTypes, scanDependencies, writeLicensePlistNPMOutput } from '@callstack/licenses';
+import { writeLicensePlistNPMOutput } from '@callstack/licenses';
+
+import { scanLicenses } from '../../../plugin-utils/build/common';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 
 import { addSettingsBundle } from './addSettingsBundle';
 import { registerLicensePlistBuildPhase } from './registerLicensePlistBuildPhase';
@@ -11,8 +14,17 @@ import { registerLicensePlistBuildPhase } from './registerLicensePlistBuildPhase
  * It scans the NPM dependencies, generates LicensePlist-compatible metadata for them,
  * configures Settings.bundle and registers a shell script generating LicensePlist metadata for iOS dependencies
  */
-export function iosCommand(iosProjectPath: string, scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory) {
-  const licenses = scanDependencies(path.join(path.resolve(iosProjectPath, '..'), 'package.json'), scanOptionsFactory);
+export async function iosCommand(
+  iosProjectPath: string,
+  { scanOptionsFactory, dependencySource, additionalProjectRoots }: PlatformPluginOptions,
+) {
+  const licenses = await scanLicenses({
+    projectRoot: path.resolve(iosProjectPath, '..'),
+    platform: 'ios',
+    dependencySource,
+    scanOptionsFactory,
+    additionalProjectRoots,
+  });
 
   writeLicensePlistNPMOutput(licenses, iosProjectPath);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-legal",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Acknowledge OSS libraries used in your React Native app",
   "keywords": [
     "react-native",
@@ -31,6 +31,7 @@
   "files": [
     "android/src",
     "android/build.gradle",
+    "android/gradle.properties",
     "bare-plugin",
     "ios",
     "lib",
@@ -62,7 +63,7 @@
     "react-native-builder-bob": "0.42.1"
   },
   "dependencies": {
-    "@callstack/licenses": "^0.3.3",
+    "@callstack/licenses": "^1.0.0",
     "glob": "^13.0.0",
     "xcode": "^3.0.1",
     "xml2js": "^0.6.2"

package/plugin/build/android/withAndroidLegal.d.ts

@@ -1,5 +1,5 @@
 import { type ConfigPlugin } from 'expo/config-plugins';
-import type { PlatformPluginOptions } from '../types';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 /**
  * Implementation of config plugin for Android setup
  *

package/plugin/build/android/withAndroidLegal.js

@@ -1,12 +1,9 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.withAndroidLegal = void 0;
-const node_path_1 = __importDefault(require("node:path"));
 const licenses_1 = require("@callstack/licenses");
 const config_plugins_1 = require("expo/config-plugins");
+const common_1 = require("../../../plugin-utils/build/common");
 const addListActivity_1 = require("./addListActivity");
 const addResourceKeepFile_1 = require("./addResourceKeepFile");
 const applyAndConfigureAboutLibrariesPlugin_1 = require("./applyAndConfigureAboutLibrariesPlugin");
@@ -17,9 +14,15 @@ const declareAboutLibrariesPlugin_1 = require("./declareAboutLibrariesPlugin");
  * It scans the NPM dependencies, generates AboutLibraries-compatible metadata,
  * installs & configures AboutLibraries Gradle plugin and adds Android Activity with a list of dependencies and their licenses
  */
-const withAndroidLegal = (config, { scanOptionsFactory }) => {
+const withAndroidLegal = (config, { scanOptionsFactory, dependencySource, additionalProjectRoots }) => {
     (0, config_plugins_1.withAndroidManifest)(config, async (exportedConfig) => {
-        const licenses = (0, licenses_1.scanDependencies)(node_path_1.default.join(exportedConfig.modRequest.projectRoot, 'package.json'), scanOptionsFactory);
+        const licenses = await (0, common_1.scanLicenses)({
+            projectRoot: exportedConfig.modRequest.projectRoot,
+            platform: 'android',
+            dependencySource,
+            scanOptionsFactory,
+            additionalProjectRoots,
+        });
         (0, licenses_1.writeAboutLibrariesNPMOutput)(licenses, exportedConfig.modRequest.platformProjectRoot);
         return exportedConfig;
     });

package/plugin/build/index.d.ts

@@ -1,4 +1,3 @@
 import type { ConfigPlugin } from 'expo/config-plugins';
-import type { PluginScanOptions } from '../../plugin-utils/build/types';
-declare const _default: ConfigPlugin<PluginScanOptions>;
+declare const _default: ConfigPlugin<Partial<import("../../plugin-utils/build/types").PluginScanOptions>>;
 export default _default;

package/plugin/build/index.js

@@ -7,11 +7,12 @@ const withIosLegal_1 = require("./ios/withIosLegal");
 // eslint-disable-next-line import/no-extraneous-dependencies
 const pak = require('react-native-legal/package.json');
 const withReactNativeLegal = (config, options) => {
-    const { devDepsMode = 'none', includeOptionalDeps = true, transitiveDepsMode = 'all' } = options ?? {};
-    const pluginScanOptions = { devDepsMode, includeOptionalDeps, transitiveDepsMode };
+    // validates the raw options, before the defaults are assigned
+    const pluginScanOptions = (0, common_1.resolvePluginScanOptions)(options);
+    const { dependencySource, additionalProjectRoots } = pluginScanOptions;
     const scanOptionsFactory = (0, common_1.createPluginScanOptionsFactory)(pluginScanOptions);
-    config = (0, withAndroidLegal_1.withAndroidLegal)(config, { scanOptionsFactory });
-    config = (0, withIosLegal_1.withIosLegal)(config, { scanOptionsFactory });
+    config = (0, withAndroidLegal_1.withAndroidLegal)(config, { scanOptionsFactory, dependencySource, additionalProjectRoots });
+    config = (0, withIosLegal_1.withIosLegal)(config, { scanOptionsFactory, dependencySource, additionalProjectRoots });
     return config;
 };
 exports.default = (0, config_plugins_1.createRunOncePlugin)(withReactNativeLegal, pak.name, pak.version);

package/plugin/build/ios/withIosLegal.d.ts

@@ -1,5 +1,5 @@
 import { type ConfigPlugin } from 'expo/config-plugins';
-import type { PlatformPluginOptions } from '../types';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 /**
  * Implementation of config plugin for iOS setup
  *

package/plugin/build/ios/withIosLegal.js

@@ -1,12 +1,9 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.withIosLegal = void 0;
-const node_path_1 = __importDefault(require("node:path"));
 const licenses_1 = require("@callstack/licenses");
 const config_plugins_1 = require("expo/config-plugins");
+const common_1 = require("../../../plugin-utils/build/common");
 const addSettingsBundle_1 = require("./addSettingsBundle");
 const registerLicensePlistBuildPhase_1 = require("./registerLicensePlistBuildPhase");
 /**
@@ -15,9 +12,15 @@ const registerLicensePlistBuildPhase_1 = require("./registerLicensePlistBuildPha
  * It scans the NPM dependencies, generates LicensePlist-compatible metadata,
  * configures Settings.bundle and registers a shell script generating LicensePlist metadata for iOS dependencies
  */
-const withIosLegal = (config, { scanOptionsFactory }) => {
+const withIosLegal = (config, { scanOptionsFactory, dependencySource, additionalProjectRoots }) => {
     (0, config_plugins_1.withXcodeProject)(config, async (exportedConfig) => {
-        const licenses = (0, licenses_1.scanDependencies)(node_path_1.default.join(exportedConfig.modRequest.projectRoot, 'package.json'), scanOptionsFactory);
+        const licenses = await (0, common_1.scanLicenses)({
+            projectRoot: exportedConfig.modRequest.projectRoot,
+            platform: 'ios',
+            dependencySource,
+            scanOptionsFactory,
+            additionalProjectRoots,
+        });
         (0, licenses_1.writeLicensePlistNPMOutput)(licenses, exportedConfig.modRequest.platformProjectRoot);
         return exportedConfig;
     });

package/plugin/build/types.d.ts

@@ -1,6 +1,2 @@
-import type { Types as SharedTypes } from '@callstack/licenses';
 import type { PluginScanOptions } from '../../plugin-utils/build/types';
-export type PluginOptions = PluginScanOptions;
-export type PlatformPluginOptions = {
-    scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory;
-};
+export type PluginOptions = Partial<PluginScanOptions>;

package/plugin/src/android/withAndroidLegal.ts

@@ -1,9 +1,8 @@
-import path from 'node:path';
-
-import { scanDependencies, writeAboutLibrariesNPMOutput } from '@callstack/licenses';
+import { writeAboutLibrariesNPMOutput } from '@callstack/licenses';
 import { type ConfigPlugin, withAndroidManifest } from 'expo/config-plugins';
 
-import type { PlatformPluginOptions } from '../types';
+import { scanLicenses } from '../../../plugin-utils/build/common';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 
 import { addListActivity } from './addListActivity';
 import { addResourceKeepFile } from './addResourceKeepFile';
@@ -16,12 +15,18 @@ import { declareAboutLibrariesPlugin } from './declareAboutLibrariesPlugin';
  * It scans the NPM dependencies, generates AboutLibraries-compatible metadata,
  * installs & configures AboutLibraries Gradle plugin and adds Android Activity with a list of dependencies and their licenses
  */
-export const withAndroidLegal: ConfigPlugin<PlatformPluginOptions> = (config, { scanOptionsFactory }) => {
+export const withAndroidLegal: ConfigPlugin<PlatformPluginOptions> = (
+  config,
+  { scanOptionsFactory, dependencySource, additionalProjectRoots },
+) => {
   withAndroidManifest(config, async (exportedConfig) => {
-    const licenses = scanDependencies(
-      path.join(exportedConfig.modRequest.projectRoot, 'package.json'),
+    const licenses = await scanLicenses({
+      projectRoot: exportedConfig.modRequest.projectRoot,
+      platform: 'android',
+      dependencySource,
       scanOptionsFactory,
-    );
+      additionalProjectRoots,
+    });
 
     writeAboutLibrariesNPMOutput(licenses, exportedConfig.modRequest.platformProjectRoot);
     return exportedConfig;

package/plugin/src/index.ts

@@ -1,8 +1,7 @@
 import type { ConfigPlugin } from 'expo/config-plugins';
 import { createRunOncePlugin } from 'expo/config-plugins';
 
-import { createPluginScanOptionsFactory } from '../../plugin-utils/build/common';
-import type { PluginScanOptions } from '../../plugin-utils/build/types';
+import { createPluginScanOptionsFactory, resolvePluginScanOptions } from '../../plugin-utils/build/common';
 
 import { withAndroidLegal } from './android/withAndroidLegal';
 import { withIosLegal } from './ios/withIosLegal';
@@ -12,12 +11,14 @@ import type { PluginOptions } from './types';
 const pak = require('react-native-legal/package.json');
 
 const withReactNativeLegal: ConfigPlugin<PluginOptions> = (config, options) => {
-  const { devDepsMode = 'none', includeOptionalDeps = true, transitiveDepsMode = 'all' } = options ?? {};
-  const pluginScanOptions: PluginScanOptions = { devDepsMode, includeOptionalDeps, transitiveDepsMode };
+  // validates the raw options, before the defaults are assigned
+  const pluginScanOptions = resolvePluginScanOptions(options);
+  const { dependencySource, additionalProjectRoots } = pluginScanOptions;
+
   const scanOptionsFactory = createPluginScanOptionsFactory(pluginScanOptions);
 
-  config = withAndroidLegal(config, { scanOptionsFactory });
-  config = withIosLegal(config, { scanOptionsFactory });
+  config = withAndroidLegal(config, { scanOptionsFactory, dependencySource, additionalProjectRoots });
+  config = withIosLegal(config, { scanOptionsFactory, dependencySource, additionalProjectRoots });
 
   return config;
 };

package/plugin/src/ios/withIosLegal.ts

@@ -1,9 +1,8 @@
-import path from 'node:path';
-
-import { scanDependencies, writeLicensePlistNPMOutput } from '@callstack/licenses';
+import { writeLicensePlistNPMOutput } from '@callstack/licenses';
 import { type ConfigPlugin, withXcodeProject } from 'expo/config-plugins';
 
-import type { PlatformPluginOptions } from '../types';
+import { scanLicenses } from '../../../plugin-utils/build/common';
+import type { PlatformPluginOptions } from '../../../plugin-utils/build/types';
 
 import { addSettingsBundle } from './addSettingsBundle';
 import { registerLicensePlistBuildPhase } from './registerLicensePlistBuildPhase';
@@ -14,12 +13,18 @@ import { registerLicensePlistBuildPhase } from './registerLicensePlistBuildPhase
  * It scans the NPM dependencies, generates LicensePlist-compatible metadata,
  * configures Settings.bundle and registers a shell script generating LicensePlist metadata for iOS dependencies
  */
-export const withIosLegal: ConfigPlugin<PlatformPluginOptions> = (config, { scanOptionsFactory }) => {
+export const withIosLegal: ConfigPlugin<PlatformPluginOptions> = (
+  config,
+  { scanOptionsFactory, dependencySource, additionalProjectRoots },
+) => {
   withXcodeProject(config, async (exportedConfig) => {
-    const licenses = scanDependencies(
-      path.join(exportedConfig.modRequest.projectRoot, 'package.json'),
+    const licenses = await scanLicenses({
+      projectRoot: exportedConfig.modRequest.projectRoot,
+      platform: 'ios',
+      dependencySource,
       scanOptionsFactory,
-    );
+      additionalProjectRoots,
+    });
 
     writeLicensePlistNPMOutput(licenses, exportedConfig.modRequest.platformProjectRoot);
     return exportedConfig;

package/plugin/src/types.ts

@@ -1,9 +1,3 @@
-import type { Types as SharedTypes } from '@callstack/licenses';
-
 import type { PluginScanOptions } from '../../plugin-utils/build/types';
 
-export type PluginOptions = PluginScanOptions;
-
-export type PlatformPluginOptions = {
-  scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory;
-};
+export type PluginOptions = Partial<PluginScanOptions>;

package/plugin-utils/build/common.d.ts

@@ -1,3 +1,25 @@
-import type { Types as SharedTypes } from '@callstack/licenses';
-import type { PluginScanOptions } from './types';
+import { type Types as SharedTypes } from '@callstack/licenses';
+import type { DependencySource, PluginScanOptions } from './types';
+/**
+ * Assigns defaults to the options provided by the user.
+ * Must be called with the raw options (before any defaults are assigned), because it validates
+ * that the options scanning `package.json` files are not combined with `dependencySource: 'metro'`, which ignores them.
+ *
+ * @throws When `dependencySource` is `'metro'` and any of the `package.json` scan options is provided
+ */
+export declare function resolvePluginScanOptions(options?: Partial<PluginScanOptions>): PluginScanOptions;
 export declare function createPluginScanOptionsFactory(pluginScanOptions: PluginScanOptions): SharedTypes.ScanPackageOptionsFactory;
+/**
+ * Collects license information of the app's NPM dependencies,
+ * using the method selected with `dependencySource`
+ *
+ * - `package-json` - scans dependencies declared in `package.json` (and their dependencies)
+ * - `metro` - takes packages included in the Metro dependency graph of the app for a given platform
+ */
+export declare function scanLicenses({ projectRoot, platform, dependencySource, scanOptionsFactory, additionalProjectRoots, }: {
+    projectRoot: string;
+    platform: 'ios' | 'android';
+    dependencySource: DependencySource;
+    scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory;
+    additionalProjectRoots: readonly string[];
+}): Promise<SharedTypes.AggregatedLicensesMapping>;

package/plugin-utils/build/common.js

@@ -1,6 +1,43 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePluginScanOptions = resolvePluginScanOptions;
 exports.createPluginScanOptionsFactory = createPluginScanOptionsFactory;
+exports.scanLicenses = scanLicenses;
+const node_path_1 = __importDefault(require("node:path"));
+const licenses_1 = require("@callstack/licenses");
+const metro_1 = require("./metro");
+const PACKAGE_JSON_SCAN_OPTION_DEFAULTS = {
+    devDepsMode: 'none',
+    includeOptionalDeps: true,
+    transitiveDepsMode: 'all',
+    additionalProjectRoots: [],
+};
+const PACKAGE_JSON_SCAN_OPTION_NAMES = Object.keys(PACKAGE_JSON_SCAN_OPTION_DEFAULTS);
+/**
+ * Assigns defaults to the options provided by the user.
+ * Must be called with the raw options (before any defaults are assigned), because it validates
+ * that the options scanning `package.json` files are not combined with `dependencySource: 'metro'`, which ignores them.
+ *
+ * @throws When `dependencySource` is `'metro'` and any of the `package.json` scan options is provided
+ */
+function resolvePluginScanOptions(options = {}) {
+    const { dependencySource = 'package-json' } = options;
+    if (dependencySource === 'metro') {
+        const ignoredOptions = PACKAGE_JSON_SCAN_OPTION_NAMES.filter((name) => options[name] !== undefined);
+        if (ignoredOptions.length > 0) {
+            throw new Error(`[react-native-legal] dependencySource: 'metro' cannot be combined with: ${ignoredOptions.join(', ')}. ` +
+                `These options only apply when dependencySource is 'package-json'.`);
+        }
+    }
+    return {
+        ...PACKAGE_JSON_SCAN_OPTION_DEFAULTS,
+        ...Object.fromEntries(Object.entries(options).filter(([, value]) => value !== undefined)),
+        dependencySource,
+    };
+}
 function createPluginScanOptionsFactory(pluginScanOptions) {
     return function ({ isRoot, isWorkspacePackage }) {
         let includeDevDependencies = false;
@@ -35,3 +72,17 @@ function createPluginScanOptionsFactory(pluginScanOptions) {
         };
     };
 }
+/**
+ * Collects license information of the app's NPM dependencies,
+ * using the method selected with `dependencySource`
+ *
+ * - `package-json` - scans dependencies declared in `package.json` (and their dependencies)
+ * - `metro` - takes packages included in the Metro dependency graph of the app for a given platform
+ */
+async function scanLicenses({ projectRoot, platform, dependencySource, scanOptionsFactory, additionalProjectRoots, }) {
+    if (dependencySource === 'metro') {
+        const packageRoots = await (0, metro_1.getMetroPackageRoots)(projectRoot, platform);
+        return (0, licenses_1.scanPackageRoots)(packageRoots);
+    }
+    return (0, licenses_1.scanDependencies)(node_path_1.default.join(projectRoot, 'package.json'), scanOptionsFactory, { additionalProjectRoots });
+}

package/plugin-utils/build/metro.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Resolves the entry file of the app, the same way it is resolved when bundling:
+ * `main` field of the app's `package.json` (either a relative path, e.g. `index.js`, or a module, e.g. `expo-router/entry`),
+ * falling back to `index` file in the project root
+ *
+ * @param projectRoot Root directory of the app (containing `package.json`)
+ */
+export declare function resolveEntryFile(projectRoot: string): string;
+/**
+ * Builds the Metro dependency graph of the app for a given platform
+ * and returns root directories of all packages included in the production bundle
+ * (the app's own package is not included)
+ *
+ * @param projectRoot Root directory of the app (containing `package.json` and `metro.config.js`)
+ * @param platform Platform for which the dependency graph should be built
+ */
+export declare function getMetroPackageRoots(projectRoot: string, platform: 'ios' | 'android'): Promise<string[]>;

package/plugin-utils/build/metro.js

@@ -0,0 +1,61 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveEntryFile = resolveEntryFile;
+exports.getMetroPackageRoots = getMetroPackageRoots;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const licenses_1 = require("@callstack/licenses");
+/**
+ * Resolves the entry file of the app, the same way it is resolved when bundling:
+ * `main` field of the app's `package.json` (either a relative path, e.g. `index.js`, or a module, e.g. `expo-router/entry`),
+ * falling back to `index` file in the project root
+ *
+ * @param projectRoot Root directory of the app (containing `package.json`)
+ */
+function resolveEntryFile(projectRoot) {
+    const packageJson = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(projectRoot, 'package.json'), { encoding: 'utf-8' }));
+    const main = packageJson.main;
+    if (!main) {
+        return require.resolve(node_path_1.default.join(projectRoot, 'index'));
+    }
+    try {
+        return require.resolve(node_path_1.default.resolve(projectRoot, main));
+    }
+    catch {
+        return require.resolve(main, { paths: [projectRoot] });
+    }
+}
+/**
+ * Builds the Metro dependency graph of the app for a given platform
+ * and returns root directories of all packages included in the production bundle
+ * (the app's own package is not included)
+ *
+ * @param projectRoot Root directory of the app (containing `package.json` and `metro.config.js`)
+ * @param platform Platform for which the dependency graph should be built
+ */
+async function getMetroPackageRoots(projectRoot, platform) {
+    const metroPath = require.resolve('metro', { paths: [projectRoot] });
+    const { loadConfig, buildGraph } = require(metroPath);
+    const config = await loadConfig({ cwd: projectRoot });
+    const graph = await buildGraph(config, {
+        entries: [resolveEntryFile(projectRoot)],
+        platform,
+        dev: false,
+        minify: false,
+    });
+    // Metro reports real paths of the modules, so the project root has to be compared by its real path too
+    const appRoot = node_fs_1.default.realpathSync(projectRoot);
+    // many modules share a directory - look up the package root only once per directory
+    const moduleDirs = new Set([...graph.dependencies.keys()].map((modulePath) => node_path_1.default.dirname(modulePath)));
+    const packageRoots = new Set();
+    for (const moduleDir of moduleDirs) {
+        const packageRoot = (0, licenses_1.findPackageRoot)(moduleDir);
+        if (packageRoot && packageRoot !== appRoot) {
+            packageRoots.add(packageRoot);
+        }
+    }
+    return [...packageRoots];
+}

package/plugin-utils/build/types.d.ts

@@ -1,5 +1,14 @@
+import type { Types as SharedTypes } from '@callstack/licenses';
+export type DependencySource = 'package-json' | 'metro';
 export interface PluginScanOptions {
+    dependencySource: DependencySource;
     devDepsMode: 'root-only' | 'none';
     includeOptionalDeps: boolean;
     transitiveDepsMode: 'all' | 'from-external-only' | 'from-workspace-only' | 'none';
+    additionalProjectRoots: readonly string[];
 }
+export type PlatformPluginOptions = {
+    scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory;
+    dependencySource: DependencySource;
+    additionalProjectRoots: readonly string[];
+};

package/plugin-utils/src/common.ts

@@ -1,6 +1,48 @@
-import type { Types as SharedTypes } from '@callstack/licenses';
+import path from 'node:path';
 
-import type { PluginScanOptions } from './types';
+import { type Types as SharedTypes, scanDependencies, scanPackageRoots } from '@callstack/licenses';
+
+import { getMetroPackageRoots } from './metro';
+import type { DependencySource, PluginScanOptions } from './types';
+
+const PACKAGE_JSON_SCAN_OPTION_DEFAULTS = {
+  devDepsMode: 'none',
+  includeOptionalDeps: true,
+  transitiveDepsMode: 'all',
+  additionalProjectRoots: [],
+} as const satisfies Omit<PluginScanOptions, 'dependencySource'>;
+
+const PACKAGE_JSON_SCAN_OPTION_NAMES = Object.keys(PACKAGE_JSON_SCAN_OPTION_DEFAULTS) as Array<
+  keyof typeof PACKAGE_JSON_SCAN_OPTION_DEFAULTS
+>;
+
+/**
+ * Assigns defaults to the options provided by the user.
+ * Must be called with the raw options (before any defaults are assigned), because it validates
+ * that the options scanning `package.json` files are not combined with `dependencySource: 'metro'`, which ignores them.
+ *
+ * @throws When `dependencySource` is `'metro'` and any of the `package.json` scan options is provided
+ */
+export function resolvePluginScanOptions(options: Partial<PluginScanOptions> = {}): PluginScanOptions {
+  const { dependencySource = 'package-json' } = options;
+
+  if (dependencySource === 'metro') {
+    const ignoredOptions = PACKAGE_JSON_SCAN_OPTION_NAMES.filter((name) => options[name] !== undefined);
+
+    if (ignoredOptions.length > 0) {
+      throw new Error(
+        `[react-native-legal] dependencySource: 'metro' cannot be combined with: ${ignoredOptions.join(', ')}. ` +
+          `These options only apply when dependencySource is 'package-json'.`,
+      );
+    }
+  }
+
+  return {
+    ...PACKAGE_JSON_SCAN_OPTION_DEFAULTS,
+    ...Object.fromEntries(Object.entries(options).filter(([, value]) => value !== undefined)),
+    dependencySource,
+  };
+}
 
 export function createPluginScanOptionsFactory(
   pluginScanOptions: PluginScanOptions,
@@ -47,3 +89,32 @@ export function createPluginScanOptionsFactory(
     };
   };
 }
+
+/**
+ * Collects license information of the app's NPM dependencies,
+ * using the method selected with `dependencySource`
+ *
+ * - `package-json` - scans dependencies declared in `package.json` (and their dependencies)
+ * - `metro` - takes packages included in the Metro dependency graph of the app for a given platform
+ */
+export async function scanLicenses({
+  projectRoot,
+  platform,
+  dependencySource,
+  scanOptionsFactory,
+  additionalProjectRoots,
+}: {
+  projectRoot: string;
+  platform: 'ios' | 'android';
+  dependencySource: DependencySource;
+  scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory;
+  additionalProjectRoots: readonly string[];
+}): Promise<SharedTypes.AggregatedLicensesMapping> {
+  if (dependencySource === 'metro') {
+    const packageRoots = await getMetroPackageRoots(projectRoot, platform);
+
+    return scanPackageRoots(packageRoots);
+  }
+
+  return scanDependencies(path.join(projectRoot, 'package.json'), scanOptionsFactory, { additionalProjectRoots });
+}

package/plugin-utils/src/metro.ts

@@ -0,0 +1,76 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+import { findPackageRoot } from '@callstack/licenses';
+
+/**
+ * Minimal typing of the Metro APIs used below - Metro is not a dependency of this package,
+ * it is loaded from the app's project
+ */
+type MetroModule = {
+  loadConfig: (argv: { cwd: string }) => Promise<unknown>;
+  buildGraph: (
+    config: unknown,
+    options: { entries: string[]; platform: string; dev: boolean; minify: boolean },
+  ) => Promise<{ dependencies: ReadonlyMap<string, unknown> }>;
+};
+
+/**
+ * Resolves the entry file of the app, the same way it is resolved when bundling:
+ * `main` field of the app's `package.json` (either a relative path, e.g. `index.js`, or a module, e.g. `expo-router/entry`),
+ * falling back to `index` file in the project root
+ *
+ * @param projectRoot Root directory of the app (containing `package.json`)
+ */
+export function resolveEntryFile(projectRoot: string): string {
+  const packageJson = JSON.parse(fs.readFileSync(path.join(projectRoot, 'package.json'), { encoding: 'utf-8' }));
+  const main: string | undefined = packageJson.main;
+
+  if (!main) {
+    return require.resolve(path.join(projectRoot, 'index'));
+  }
+
+  try {
+    return require.resolve(path.resolve(projectRoot, main));
+  } catch {
+    return require.resolve(main, { paths: [projectRoot] });
+  }
+}
+
+/**
+ * Builds the Metro dependency graph of the app for a given platform
+ * and returns root directories of all packages included in the production bundle
+ * (the app's own package is not included)
+ *
+ * @param projectRoot Root directory of the app (containing `package.json` and `metro.config.js`)
+ * @param platform Platform for which the dependency graph should be built
+ */
+export async function getMetroPackageRoots(projectRoot: string, platform: 'ios' | 'android'): Promise<string[]> {
+  const metroPath = require.resolve('metro', { paths: [projectRoot] });
+  const { loadConfig, buildGraph }: MetroModule = require(metroPath);
+
+  const config = await loadConfig({ cwd: projectRoot });
+
+  const graph = await buildGraph(config, {
+    entries: [resolveEntryFile(projectRoot)],
+    platform,
+    dev: false,
+    minify: false,
+  });
+
+  // Metro reports real paths of the modules, so the project root has to be compared by its real path too
+  const appRoot = fs.realpathSync(projectRoot);
+  // many modules share a directory - look up the package root only once per directory
+  const moduleDirs = new Set([...graph.dependencies.keys()].map((modulePath) => path.dirname(modulePath)));
+  const packageRoots = new Set<string>();
+
+  for (const moduleDir of moduleDirs) {
+    const packageRoot = findPackageRoot(moduleDir);
+
+    if (packageRoot && packageRoot !== appRoot) {
+      packageRoots.add(packageRoot);
+    }
+  }
+
+  return [...packageRoots];
+}

package/plugin-utils/src/types.ts

@@ -1,5 +1,17 @@
+import type { Types as SharedTypes } from '@callstack/licenses';
+
+export type DependencySource = 'package-json' | 'metro';
+
 export interface PluginScanOptions {
+  dependencySource: DependencySource;
   devDepsMode: 'root-only' | 'none';
   includeOptionalDeps: boolean;
   transitiveDepsMode: 'all' | 'from-external-only' | 'from-workspace-only' | 'none';
+  additionalProjectRoots: readonly string[];
 }
+
+export type PlatformPluginOptions = {
+  scanOptionsFactory: SharedTypes.ScanPackageOptionsFactory;
+  dependencySource: DependencySource;
+  additionalProjectRoots: readonly string[];
+};

package/react-native.config.js

@@ -15,14 +15,12 @@ module.exports = {
 
             return 'none';
           },
-          default: 'none',
         },
         {
           name: '--od, --include-optional-deps [boolean]',
           description:
             'Whether to include optionalDependencies in the scan; includeTransitiveDependencies option applies',
           parse: (val) => val !== 'false',
-          default: true,
         },
         {
           name: '--tm, --transitive-deps-mode <string>',
@@ -34,15 +32,44 @@ module.exports = {
 
             return 'all';
           },
-          default: 'all',
+        },
+        {
+          name: '--ds, --dependency-source <string>',
+          description:
+            'How the dependencies are determined: from package.json files or from the Metro dependency graph',
+          parse: (val) => {
+            if (val === 'metro') {
+              return val;
+            }
+
+            return 'package-json';
+          },
+          default: 'package-json',
+        },
+        {
+          name: '--apr, --additional-project-roots <paths>',
+          description:
+            'Comma-separated paths (relative to the app root) of other folders with a package.json whose dependencies should be listed too, e.g. monorepo workspaces the app does not depend on; can be repeated',
+          parse: (val, previous = []) => [...previous, ...val.split(',').map((rootPath) => rootPath.trim())],
         },
       ],
       func: ([], { project: { android, ios } }, args) => {
         const generateLegal = require('./bare-plugin/build').default;
-        /** @type {import('./plugin-utils/build/types').PluginScanOptions} */
-        const { devDepsMode, includeOptionalDeps, transitiveDepsMode } = args;
+        const { resolvePluginScanOptions } = require('./plugin-utils/build/common');
+        const { devDepsMode, includeOptionalDeps, transitiveDepsMode, dependencySource, additionalProjectRoots } = args;
 
-        generateLegal(android?.sourceDir, ios?.sourceDir, { devDepsMode, includeOptionalDeps, transitiveDepsMode });
+        // the defaults are assigned here (not in the options above), so that the options explicitly passed by the user can be validated
+        return generateLegal(
+          android?.sourceDir,
+          ios?.sourceDir,
+          resolvePluginScanOptions({
+            devDepsMode,
+            includeOptionalDeps,
+            transitiveDepsMode,
+            dependencySource,
+            additionalProjectRoots,
+          }),
+        );
       },
     },
   ],