Evaluator Rules - condition to evaluate only direct and one level below package dependencies

[felix-leyva]

Hello ORT team,
I am writing an evaluator.rules.kts file and would like to ask you, if there is any way, to only evaluate within a packageRule, dependencies which are directly declared in a Gradle Project, or which are the first level dependencies of a dependency of a project.
Ex:
Root Project

• Package 1
  • Package1.1
    • Package1.1.1
    • Package1.1.2
  • Package1.2
    • ...
  • ...
• Package 2
  • Package 2.1
  • ...
    The following should be evaluated: Package1, 1.1, 1.2, 2, 2.1
    All other below should not evaluated.

Thanks for your help, best regards
Felix

[sschuberth]

to only evaluate within a packageRule, dependencies

Not that this is sort of a contradiction. If you want to analyze dependencies (i.e. references to packages), you should use a DependencyRule instead of a PackageRule.

The former has

ort/evaluator/src/main/kotlin/DependencyRule.kt

Lines 73 to 76 in 7818820

	/**
	* Return the direct dependencies of the [dependency].
	*/
	fun directDependencies() = dependency.visitDependencies { it.toList() }

which should suite your needs.