Skip to content

Conversation

@javierbrea
Copy link
Collaborator

Support multiple systems when checking dependencies licenses

Description

Added

  • feat: Upgrade check-license-compliance to v3. Now it supports checking licenses from NPM, Maven, Python and Go dependencies. Update the action configuration accordingly
  • feat: Add check-license-compliance options commented out to configuration file, so it is easier to understand what can be configured

Fixed

  • fix: Fix typo in "0BSD" license

Agreement

Please check the following boxes after you have read and understood each item.

  • I have read the CONTRIBUTING document
  • I have read the CODE_OF_CONDUCT document
  • I accept that, by signing the Contributor License Agreement through a comment in the PR, my Github user name will be stored by in a branch of this repository for future reference.

In case this is your first contribution to this project, you will also have to add a comment with the following text: "I have read the CLA Document and I hereby sign the CLA", otherwise the PR status will fail and our bot will request you to add it. Once you have signed it in a PR, you will not have to sign it again for future contributions.

@github-actions
Copy link

github-actions bot commented Feb 13, 2025

Check SPDX headers

✅ 45 files have valid headers.

@github-actions
Copy link

github-actions bot commented Feb 13, 2025

Check License Compliance

✅ There are 948 dependencies with allowed licenses.

⚠️ There are 7 dependencies with dangerous licenses:

  • NPM:binaryextensions@6.11.0: Artistic-2.0
    • Transitive dependency of NPM:mem-fs-editor@11.1.4. Defined in package.json
  • NPM:editions@6.21.0: Artistic-2.0
    • Transitive dependency of NPM:mem-fs-editor@11.1.4. Defined in package.json
  • NPM:textextensions@6.11.0: Artistic-2.0
    • Transitive dependency of NPM:mem-fs-editor@11.1.4. Defined in package.json
  • NPM:version-range@4.14.0: Artistic-2.0
    • Transitive dependency of NPM:mem-fs-editor@11.1.4. Defined in package.json
  • NPM:@cspell/dict-en-common-misspellings@2.0.9: CC-BY-SA-4.0
    • Transitive dependency of NPM:cspell@8.15.5. Defined in package.json
  • NPM:email-validator@2.0.4: unknown
    • Direct dependency. Defined in package.json
  • NPM:exit@0.1.2: unknown
    • Transitive dependency of NPM:jest@29.7.0. Defined in package.json

‼️ There were some issues while verifying the licenses. This can occasionally occur if a dependency was recently released, as the dependency graph may not yet be fully updated.

Errors:

  • NPM:call-bind-apply-helpers@1.0.2: Error requesting dependencies: 5 NOT_FOUND: dependencies not found

✅ Result: Valid licenses

@javierbrea javierbrea merged commit 09b88b1 into release Feb 14, 2025
5 checks passed
@javierbrea javierbrea deleted the feat/license-compliance-multi-language branch February 14, 2025 06:08
@github-actions github-actions bot locked and limited conversation to collaborators Feb 14, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants