fosslight-source 2.2.14__tar.gz → 2.2.15__tar.gz

{fosslight_source-2.2.14/src/fosslight_source.egg-info → fosslight_source-2.2.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fosslight_source
-Version: 2.2.14
+Version: 2.2.15
 Summary: FOSSLight Source Scanner
 Author: LG Electronics
 License-Expression: Apache-2.0

{fosslight_source-2.2.14 → fosslight_source-2.2.15}/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fosslight_source"
-version = "2.2.14"
+version = "2.2.15"
 description = "FOSSLight Source Scanner"
 readme = "README.md"
 license = "Apache-2.0"

{fosslight_source-2.2.14 → fosslight_source-2.2.15}/src/fosslight_source/_scan_item.py

@@ -19,7 +19,15 @@ replace_word = ["-only", "-old-style", "-or-later", "licenseref-scancode-", "lic
 _notice_filename = ['licen[cs]e[s]?', 'notice[s]?', 'legal', 'copyright[s]?', 'copying*', 'patent[s]?', 'unlicen[cs]e', 'eula',
                     '[a,l]?gpl[-]?[1-3]?[.,-,_]?[0-1]?', 'mit', 'bsd[-]?[0-4]?', 'bsd[-]?[0-4][-]?clause[s]?',
                     'apache[-,_]?[1-2]?[.,-,_]?[0-2]?']
-_manifest_filename = [r'.*\.pom$', r'package\.json$', r'setup\.py$', r'setup\.cfg$', r'.*\.podspec$', r'Cargo\.toml$']
+_manifest_filename = [
+    r'.*\.pom$',
+    r'package\.json$',
+    r'setup\.py$',
+    r'setup\.cfg$',
+    r'.*\.podspec$',
+    r'Cargo\.toml$',
+    r'huggingface_hub_metadata\.json$',
+]
 MAX_LICENSE_LENGTH = 200
 MAX_LICENSE_TOTAL_LENGTH = 600
 SUBSTRING_LICENSE_COMMENT = "Maximum character limit (License)"

{fosslight_source-2.2.14 → fosslight_source-2.2.15}/src/fosslight_source/cli.py

@@ -346,15 +346,18 @@ def merge_results(
                 scancode_result.append(new_result_item)
     if manifest_licenses:
         for file_name, licenses in manifest_licenses.items():
+            valid_licenses = [lic.strip() for lic in licenses if isinstance(lic, str) and lic.strip()]
+            if not valid_licenses:
+                continue
             if file_name in scancode_result:
                 merged_result_item = scancode_result[scancode_result.index(file_name)]
                 # overwrite existing detected licenses with manifest-provided licenses
                 merged_result_item.licenses = []  # clear existing licenses (setter clears when value falsy)
-                merged_result_item.licenses = licenses
+                merged_result_item.licenses = valid_licenses
                 merged_result_item.is_manifest_file = True
             else:
                 new_result_item = SourceItem(file_name)
-                new_result_item.licenses = licenses
+                new_result_item.licenses = valid_licenses
                 new_result_item.is_manifest_file = True
                 scancode_result.append(new_result_item)
 
@@ -432,6 +435,8 @@ def run_scanners(
     logger, result_log = init_log(os.path.join(output_path, f"fosslight_log_src_{start_time}.txt"),
                                   True, logging.INFO, logging.DEBUG, PKG_NAME, path_to_scan, path_to_exclude)
 
+    logger.info(f"Tool Info : {result_log['Tool Info']}")
+
     if '.xlsx' not in output_extensions and print_matched_text:
         logger.warning("-m option is only available for excel.")
         print_matched_text = False

{fosslight_source-2.2.14 → fosslight_source-2.2.15}/src/fosslight_source/run_manifest_extractor.py

@@ -207,6 +207,49 @@ def get_licenses_from_cargo_toml(file_path: str) -> list[str]:
     return []
 
 
+def get_licenses_from_huggingface_metadata(file_path: str) -> list[str]:
+    try:
+        with open(file_path, 'r', encoding='utf-8') as f:
+            data = json.load(f)
+    except Exception as ex:
+        logger.info(f"Failed to read huggingface_hub_metadata.json {file_path}: {ex}")
+        return []
+
+    if not isinstance(data, dict):
+        return []
+
+    licenses: list[str] = []
+
+    def append_license(value):
+        if isinstance(value, str):
+            token = value.strip()
+            if token and token not in licenses:
+                licenses.append(token)
+        elif isinstance(value, list):
+            for item in value:
+                append_license(item)
+
+    # Hugging Face model API commonly returns top-level `license`
+    append_license(data.get('license'))
+
+    # Some metadata may include cardData/license variants
+    card_data = data.get('cardData')
+    if isinstance(card_data, dict):
+        append_license(card_data.get('license'))
+        append_license(card_data.get('licenses'))
+
+    # Many Hub API responses expose license only via tags, e.g. "license:apache-2.0".
+    tags = data.get('tags')
+    if isinstance(tags, list):
+        for tag in tags:
+            if isinstance(tag, str):
+                prefix = 'license:'
+                if tag.lower().startswith(prefix):
+                    append_license(tag[len(prefix):].strip())
+
+    return licenses
+
+
 def get_manifest_licenses(file_path: str) -> list[str]:
     if file_path.endswith('.pom'):
         try:
@@ -247,3 +290,9 @@ def get_manifest_licenses(file_path: str) -> list[str]:
         except Exception as ex:
             logger.info(f"Failed to extract license from Cargo.toml {file_path}: {ex}")
             return []
+    elif os.path.basename(file_path).lower() == 'huggingface_hub_metadata.json':
+        try:
+            return get_licenses_from_huggingface_metadata(file_path)
+        except Exception as ex:
+            logger.info(f"Failed to extract license from huggingface_hub_metadata.json {file_path}: {ex}")
+            return []

{fosslight_source-2.2.14 → fosslight_source-2.2.15}/src/fosslight_source/run_scancode.py

@@ -103,6 +103,9 @@ def run_scan(
         if not called_by_cli:
             logger, _result_log = init_log(os.path.join(output_path, f"fosslight_log_src_{_start_time}.txt"),
                                            True, logging.INFO, logging.DEBUG, _PKG_NAME, path_to_scan, path_to_exclude)
+
+            logger.info(f"Tool Info : {_result_log['Tool Info']}")
+
         num_cores = multiprocessing.cpu_count() - 1 if num_cores < 0 else num_cores
 
         if os.path.isdir(path_to_scan):

{fosslight_source-2.2.14 → fosslight_source-2.2.15/src/fosslight_source.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fosslight_source
-Version: 2.2.14
+Version: 2.2.15
 Summary: FOSSLight Source Scanner
 Author: LG Electronics
 License-Expression: Apache-2.0