fosslight-dependency 3.14.1__tar.gz → 3.14.3__tar.gz

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: fosslight_dependency
-Version: 3.14.1
+Version: 3.14.3
 Summary: FOSSLight Dependency Scanner
 Home-page: https://github.com/fosslight/fosslight_dependency_scanner
 Author: LG Electronics
@@ -112,7 +112,7 @@ Description: <!--
           <tr>
             <td>Python</td>
             <td>Pypi</td>
-            <td>requirements.txt, setup.py</td>
+            <td>requirements.txt, setup.py, pyproject.toml</td>
             <td>O</td>
             <td>O</td>
             <td>O</td>
@@ -133,6 +133,14 @@ Description: <!--
             <td>X</td>
             <td>X</td>
           </tr>
+          <tr>
+            <td>Unity</td>
+            <td>Unity</td>
+            <td>Library/PackageManager/ProjectCache</td>
+            <td>O</td>
+            <td>O</td>
+            <td>X</td>
+          </tr>
         </tbody>
         </table>
         

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/README.md

@@ -104,7 +104,7 @@ In this user guide, you can see how to install the FOSSLight Dependency Scanner
   <tr>
     <td>Python</td>
     <td>Pypi</td>
-    <td>requirements.txt, setup.py</td>
+    <td>requirements.txt, setup.py, pyproject.toml</td>
     <td>O</td>
     <td>O</td>
     <td>O</td>
@@ -125,6 +125,14 @@ In this user guide, you can see how to install the FOSSLight Dependency Scanner
     <td>X</td>
     <td>X</td>
   </tr>
+  <tr>
+    <td>Unity</td>
+    <td>Unity</td>
+    <td>Library/PackageManager/ProjectCache</td>
+    <td>O</td>
+    <td>O</td>
+    <td>X</td>
+  </tr>
 </tbody>
 </table>
 

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/setup.py

@@ -35,7 +35,7 @@ if __name__ == "__main__":
 
     setup(
         name=_PACKAEG_NAME,
-        version='3.14.1',
+        version='3.14.3',
         package_dir={"": "src"},
         packages=find_namespace_packages(where='src'),
         description='FOSSLight Dependency Scanner',

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency/_analyze_dependency.py

@@ -18,6 +18,7 @@ from fosslight_dependency.package_manager.Carthage import Carthage
 from fosslight_dependency.package_manager.Go import Go
 from fosslight_dependency.package_manager.Nuget import Nuget
 from fosslight_dependency.package_manager.Helm import Helm
+from fosslight_dependency.package_manager.Unity import Unity
 import fosslight_util.constant as constant
 
 logger = logging.getLogger(constant.LOGGER_NAME)
@@ -53,6 +54,8 @@ def analyze_dependency(package_manager_name, input_dir, output_dir, pip_activate
         package_manager = Nuget(input_dir, output_dir)
     elif package_manager_name == const.HELM:
         package_manager = Helm(input_dir, output_dir)
+    elif package_manager_name == const.UNITY:
+        package_manager = Unity(input_dir, output_dir)
     else:
         logger.error(f"Not supported package manager name: {package_manager_name}")
         ret = False

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency/_help.py

@@ -23,6 +23,7 @@ _HELP_MESSAGE_DEPENDENCY = """
         Go (Go)
         Nuget (.NET)
         Helm (Kubernetes)
+        Unity (Unity)
 
     Options:
         Optional

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency/_package_manager.py

@@ -132,7 +132,7 @@ class PackageManager:
                     }}'''
         try:
             with open(const.SUPPORT_PACKAE.get(self.package_manager_name), 'a', encoding='utf8') as f:
-                f.write(allDeps)
+                f.write(f'\n{allDeps}\n')
                 ret = True
         except Exception as e:
             logging.warning(f"Cannot add the allDeps task in build.gradle: {e}")

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency/constant.py

@@ -22,6 +22,7 @@ CARTHAGE = 'carthage'
 GO = 'go'
 NUGET = 'nuget'
 HELM = 'helm'
+UNITY = 'unity'
 
 # Supported package name and manifest file
 SUPPORT_PACKAE = {
@@ -36,7 +37,8 @@ SUPPORT_PACKAE = {
     CARTHAGE: 'Cartfile.resolved',
     GO: 'go.mod',
     NUGET: ['packages.config', os.path.join('obj', 'project.assets.json')],
-    HELM: 'Chart.yaml'
+    HELM: 'Chart.yaml',
+    UNITY: os.path.join('Library', 'PackageManager', 'ProjectCache')
 }
 
 # default android app name

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency/package_manager/Go.py

@@ -10,6 +10,7 @@ import json
 from bs4 import BeautifulSoup
 import urllib.request
 import re
+import shutil
 import fosslight_util.constant as constant
 import fosslight_dependency.constant as const
 from fosslight_dependency._package_manager import PackageManager, get_url_to_purl
@@ -24,6 +25,8 @@ class Go(PackageManager):
     is_run_plugin = False
     dn_url = 'https://pkg.go.dev/'
     tmp_file_name = 'tmp_go_list.json'
+    go_work = 'go.work'
+    tmp_go_work = 'go.work.tmp'
 
     def __init__(self, input_dir, output_dir):
         super().__init__(self.package_manager_name, self.dn_url, input_dir, output_dir)
@@ -33,6 +36,8 @@ class Go(PackageManager):
     def __del__(self):
         if os.path.isfile(self.tmp_file_name):
             os.remove(self.tmp_file_name)
+        if os.path.isfile(self.tmp_go_work):
+            shutil.move(self.tmp_go_work, self.go_work)
 
     def parse_dependency_tree(self, go_deptree_txt):
         for line in go_deptree_txt.split('\n'):
@@ -49,6 +54,9 @@ class Go(PackageManager):
     def run_plugin(self):
         ret = True
 
+        if os.path.isfile(self.go_work):
+            shutil.move(self.go_work, self.tmp_go_work)
+
         logger.info("Execute 'go list -m -mod=mod -json all' to obtain package info.")
         cmd = f"go list -m -mod=mod -json all > {self.tmp_file_name}"
 
@@ -64,6 +72,8 @@ class Go(PackageManager):
         if ret_cmd_tree != 0:
             self.parse_dependency_tree(ret_cmd_tree)
 
+        if os.path.isfile(self.tmp_go_work):
+            shutil.move(self.tmp_go_work, self.go_work)
         return ret
 
     def parse_oss_information(self, f_name):

fosslight_dependency-3.14.3/src/fosslight_dependency/package_manager/Unity.py

@@ -0,0 +1,103 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+# Copyright (c) 2024 LG Electronics Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+import os
+import logging
+import re
+import yaml
+import fosslight_util.constant as constant
+import fosslight_dependency.constant as const
+from fosslight_dependency._package_manager import PackageManager
+from fosslight_dependency._package_manager import check_and_run_license_scanner, get_url_to_purl
+
+logger = logging.getLogger(constant.LOGGER_NAME)
+proprietary_license = 'Proprietary License'
+unclassifed_license = 'UnclassifiedLicense'
+license_md = 'LICENSE.md'
+third_party_md = 'Third Party Notices.md'
+
+
+class Unity(PackageManager):
+    package_manager_name = const.UNITY
+
+    input_file_name = const.SUPPORT_PACKAE.get(package_manager_name)
+    packageCache_dir = os.path.join('Library', 'PackageCache')
+    mirror_url = 'https://github.com/needle-mirror/'
+    unity_internal_url = 'https://github.cds.internal.unity3d.com'
+    third_notice_txt = 'third_party_notice.txt'
+
+    def __init__(self, input_dir, output_dir):
+        super().__init__(self.package_manager_name, '', input_dir, output_dir)
+        self.append_input_package_list_file(self.input_file_name)
+
+    def parse_oss_information(self, f_name):
+        comment = ''
+
+        with open(f_name, 'r', encoding='utf8') as f:
+            f_yml = yaml.safe_load(f)
+            resolvedPkg = f_yml['m_ResolvedPackages']
+
+        try:
+            sheet_list = []
+
+            for pkg_data in resolvedPkg:
+                oss_name = pkg_data['name']
+                oss_version = pkg_data['version']
+
+                oss_packagecache_dir = os.path.join(self.packageCache_dir, f'{oss_name}@{oss_version}')
+                license_f = os.path.join(oss_packagecache_dir, license_md)
+                if os.path.isfile(license_f):
+                    license_name = check_and_run_license_scanner(self.platform,
+                                                                 self.license_scanner_bin,
+                                                                 license_f)
+                    if license_name == unclassifed_license or license_name == '':
+                        with open(license_f, 'r', encoding='utf-8') as f:
+                            for line in f:
+                                matched_l = re.search(r'Unity\s[\s\w]*\sLicense', line)
+                                if matched_l:
+                                    license_name = matched_l[0]
+                                    break
+                else:
+                    license_name = proprietary_license
+
+                third_f = os.path.join(oss_packagecache_dir, third_party_md)
+                if os.path.isfile(third_f):
+                    with open(third_f, 'r', encoding='utf-8') as f:
+                        third_notice = f.readlines()
+                    with open(self.third_notice_txt, 'a+', encoding='utf-8') as tf:
+                        for line in third_notice:
+                            tf.write(line)
+                            tf.flush()
+
+                homepage = pkg_data['repository']['url']
+                if homepage and homepage.startswith('git@'):
+                    homepage = homepage.replace('git@', 'https://')
+                if homepage is None or homepage.startswith(self.unity_internal_url):
+                    if license_name != proprietary_license:
+                        homepage = f'{self.mirror_url}{oss_name}'
+                if homepage is None:
+                    homepage = ''
+
+                dn_loc = homepage
+                purl = get_url_to_purl(dn_loc, self.package_manager_name)
+                if purl == 'None':
+                    purl = ''
+                if purl != '':
+                    purl = f'{purl}@{oss_version}'
+
+                comment_list = []
+                if self.direct_dep:
+                    if pkg_data['isDirectDependency']:
+                        comment_list.append('direct')
+                    else:
+                        comment_list.append('transitive')
+
+                comment = ','.join(comment_list)
+                sheet_list.append([purl, oss_name, oss_version, license_name, dn_loc, homepage,
+                                  '', '', comment, ''])
+        except Exception as e:
+            logger.error(f"Fail to parse unity oss information: {e}")
+
+        return sheet_list

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency/run_dependency_scanner.py

@@ -161,7 +161,7 @@ def run_dependency_scanner(package_manager='', input_dir='', output_dir_file='',
                 logger.warning("Dependency scanning terminated because the package manager was not found.")
                 ret = False
     else:
-        found_package_manager[package_manager] = ''
+        found_package_manager[package_manager] = ["manual detect ('-m option')"]
 
     pass_key = 'PASS'
     success_pm = []
@@ -177,6 +177,13 @@ def run_dependency_scanner(package_manager='', input_dir='', output_dir_file='',
             if pm == const.GRADLE:
                 if const.ANDROID in found_package_manager.keys():
                     found_package_manager[const.ANDROID] = pass_key
+                    if f"{const.ANDROID} ({', '.join(manifest_file_name)})" in fail_pm:
+                        fail_pm.remove(f"{const.ANDROID} ({', '.join(manifest_file_name)})")
+            elif pm == const.ANDROID:
+                if const.GRADLE in found_package_manager.keys():
+                    found_package_manager[const.GRADLE] = pass_key
+                    if f"{const.GRADLE} ({', '.join(manifest_file_name)})" in fail_pm:
+                        fail_pm.remove(f"{const.GRADLE} ({', '.join(manifest_file_name)})")
         else:
             fail_pm.append(f"{pm} ({', '.join(manifest_file_name)})")
     cover = CoverItem(tool_name=_PKG_NAME,

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: fosslight-dependency
-Version: 3.14.1
+Version: 3.14.3
 Summary: FOSSLight Dependency Scanner
 Home-page: https://github.com/fosslight/fosslight_dependency_scanner
 Author: LG Electronics
@@ -112,7 +112,7 @@ Description: <!--
           <tr>
             <td>Python</td>
             <td>Pypi</td>
-            <td>requirements.txt, setup.py</td>
+            <td>requirements.txt, setup.py, pyproject.toml</td>
             <td>O</td>
             <td>O</td>
             <td>O</td>
@@ -133,6 +133,14 @@ Description: <!--
             <td>X</td>
             <td>X</td>
           </tr>
+          <tr>
+            <td>Unity</td>
+            <td>Unity</td>
+            <td>Library/PackageManager/ProjectCache</td>
+            <td>O</td>
+            <td>O</td>
+            <td>X</td>
+          </tr>
         </tbody>
         </table>
         

{fosslight_dependency-3.14.1 → fosslight_dependency-3.14.3}/src/fosslight_dependency.egg-info/SOURCES.txt

@@ -31,4 +31,5 @@ src/fosslight_dependency/package_manager/Nuget.py
 src/fosslight_dependency/package_manager/Pub.py
 src/fosslight_dependency/package_manager/Pypi.py
 src/fosslight_dependency/package_manager/Swift.py
+src/fosslight_dependency/package_manager/Unity.py
 src/fosslight_dependency/package_manager/__init__.py