Comments (1)
Does #50 (comment) cover your case?
Frankly speaking, there's no way to automatically resolve cases when the developer list multiple licenses.
It would be awesome if they used SPDX license expression in Bundle-License
, however, they rarely do so,
In the non-tirival cases, I do the following:
a) Approach projects to update their MANIFEST, pom.xml, etc. For instance, here's the list of issues I created when adding license verification to JMeter: apache/jmeter#469 (comment)
b) Use overrideLicense
to clarify the actual meaning. For instance, it detected EPL-2.0 AND GPL2 w/ CPE
, and most likely the actual license is EPL-2.0 OR GPL2-or-later with Classpath-Exception
. If that is the case, you could add the relevant override.
I might start collecting a set of well-known resolution cases (e.g. I have resolution history in JMeter: https://github.com/apache/jmeter/blob/da6efde33eb80751eff1f778d63b67e4f9bcd652/src/licenses/build.gradle.kts#L72 )
However, I have not explored that yet.
from vlsi-release-plugins.
Related Issues (20)
- Add quotes for javap command in jandex plugin
- UnknownTaskException: Task with name 'check' not found HOT 1
- checksum-dependency-plugin cannot download pgp keys HOT 4
- XmlSlurper is too strict when reading POM files for license report HOT 1
- Problems when publishing calcite to the private maven nexus repo HOT 5
- Add license check HOT 9
- license-gather: Handling of multi-license dependencies HOT 2
- Sigstore: signing and verification
- [Discussion] Advice for using the license gather plugin in a multi-module project. HOT 3
- [licence-gather-plugin] Upon failure to find license, indicate the dependency HOT 5
- Upgrade grgit HOT 2
- [Jandex plugin] processJandexIndex delete resources from build dir HOT 8
- [stage-vote-release-plugin] Execution failed for task ':releaseRepository' due to missing nexus.txt file HOT 5
- [Gradle Extensions Plugin] Typed property delegates for required properties HOT 2
- After upgrade to gradle 8.x com.github.vlsi.jandex.JandexWork fails with CIRCULAR REFERENCE ArrayIndexOutOfBoundsException HOT 1
- [stage-vote-release-plugin] signingKey instead of secretKeyRingFile HOT 5
- Gradle 8.1.1: Querying the mapped value of flatmap(provider(task 'distTar', class org.gradle.api.tasks.bundling.Tar)) before task ':release:distTar' has completed is not supported HOT 1
- Dependency Dashboard
- Jandax fail when using java modularity (JPMS) HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vlsi-release-plugins.