feat(license): add struct with types for licenses

pkg/conda/meta/parse.go

@@ -36,8 +36,8 @@ func (p *Parser) Parse(r dio.ReadSeekerAt) ([]types.Library, []types.Dependency,
 	}
 
 	return []types.Library{{
-		Name:    data.Name,
-		Version: data.Version,
-		License: data.License, // can be empty
+		Name:     data.Name,
+		Version:  data.Version,
+		Licenses: types.LicensesFromString(data.License, types.LicenseTypeName),
 	}}, nil, nil
 }

pkg/conda/meta/parse_test.go

@@ -21,12 +21,28 @@ func TestParse(t *testing.T) {
 		{
 			name:  "_libgcc_mutex",
 			input: "testdata/_libgcc_mutex-0.1-main.json",
-			want:  []types.Library{{Name: "_libgcc_mutex", Version: "0.1"}},
+			want: []types.Library{
+				{
+					Name:    "_libgcc_mutex",
+					Version: "0.1",
+				},
+			},
 		},
 		{
 			name:  "libgomp",
 			input: "testdata/libgomp-11.2.0-h1234567_1.json",
-			want:  []types.Library{{Name: "libgomp", Version: "11.2.0", License: "GPL-3.0-only WITH GCC-exception-3.1"}},
+			want: []types.Library{
+				{
+					Name:    "libgomp",
+					Version: "11.2.0",
+					Licenses: types.Licenses{
+						{
+							Type:  types.LicenseTypeName,
+							Value: "GPL-3.0-only WITH GCC-exception-3.1",
+						},
+					},
+				},
+			},
 		},
 		{
 			name:    "invalid_json",

pkg/java/pom/artifact.go

@@ -49,10 +49,6 @@ func (a artifact) Equal(o artifact) bool {
 	return a.GroupID == o.GroupID || a.ArtifactID == o.ArtifactID || a.Version.String() == o.Version.String()
 }
 
-func (a artifact) JoinLicenses() string {
-	return strings.Join(a.Licenses, ", ")
-}
-
 func (a artifact) ToPOMLicenses() pomLicenses {
 	return pomLicenses{
 		License: lo.Map(a.Licenses, func(lic string, _ int) pomLicense {

pkg/java/pom/parse.go

@@ -212,7 +212,7 @@ func (p *parser) parseRoot(root artifact) ([]types.Library, []types.Dependency,
 			ID:        packageID(name, art.Version.String()),
 			Name:      name,
 			Version:   art.Version.String(),
-			License:   art.JoinLicenses(),
+			Licenses:  types.LicensesFromStringSlice(art.Licenses, types.LicenseTypeName), // Maven recommends using SPDX licenses - https://maven.apache.org/pom.html#licenses.
 			Indirect:  !art.Direct,
 			Locations: art.Locations,
 		}