Validate dependencies licenses (#836)

* Add check-licenses-go-mod to Makefile using go-licenses

* Add check-licenses-npm to Makefile using senseyeio/diligent

* Add check-licenses to Makefile

* Update base-64 version to 1.0.0

Makefile

@@ -39,6 +39,18 @@ all: build
 clean:
 	@rm -rf $(API_BUILD_DIR) $(UI_BUILD_DIR) ddl/statik.go statik $(LAKEFS_BINARY_NAME) $(LAKECTL_BINARY_NAME)
 
+check-licenses: check-licenses-go-mod check-licenses-npm
+
+check-licenses-go-mod:
+	go get github.com/google/go-licenses
+	$(GOBINPATH)/go-licenses check ./cmd/$(LAKEFS_BINARY_NAME)
+	$(GOBINPATH)/go-licenses check ./cmd/$(LAKECTL_BINARY_NAME)
+
+check-licenses-npm:
+	go get github.com/senseyeio/diligent/cmd/diligent
+	# The -i arg is a workaround to ignore NPM scoped packages until https://github.com/senseyeio/diligent/issues/77 is fixed
+	$(GOBINPATH)/diligent check -w permissive -i ^@[^/]+?/[^/]+ $(UI_DIR)
+
 docs/assets/js/swagger.yml: swagger.yml
 	@cp swagger.yml docs/assets/js/swagger.yml
 

webui/package.json

@@ -8,7 +8,7 @@
     "@testing-library/react": "^10.4.8",
     "@testing-library/user-event": "^10.3.1",
     "acorn": ">=7.1.1",
-    "base-64": "^0.1.0",
+    "base-64": "^1.0.0",
     "bootstrap": "^4.5.2",
     "bootswatch": "^4.5.2",
     "http-proxy-middleware": "^1.0.5",