mirror of
https://github.com/Stirling-Tools/Stirling-PDF.git
synced 2026-09-03 05:10:16 +03:00
Ludy
8094765bab
# Description of Changes This change adds a version-scoped override mechanism for dependencies whose published metadata does not expose a detectable license. - Added `app/license-overrides.json` with verified Apache License 2.0 metadata for: - `com.hubspot.immutables:immutables-exceptions:1.9` - `com.hubspot:algebra:1.5` - Added `ModuleLicenseOverrideFilter` as custom `buildSrc` logic for the Gradle dependency license report plugin. - Applied overrides only when the exact `group:artifact:version` matches and no usable license metadata was detected. - Added automatic maintenance of the override file: - Removes overrides when the dependency is no longer resolved. - Removes overrides when the dependency starts publishing valid license metadata. - Migrates stale overrides to newer unresolved versions and clears their metadata for re-verification. - Adds null-valued placeholders for newly detected dependencies without license metadata. - Preserves populated overrides for newer versions when already present. - Added Gradle version-aware dependency ordering for override migration. - Registered `app/license-overrides.json` as an input for license-report and license-check preparation tasks. - Centralized the dependency license report plugin version in `buildSrc`. - Added unit tests covering override application, cleanup, migration, exact-version matching, concurrent versions, placeholder generation, and numeric version ordering. - Added documentation describing the override lifecycle, verification requirements, maintenance workflow, and validation commands. - Replaced broad null-license allowances for the two HubSpot modules with explicit Apache License 2.0 metadata. - Added accepted GNU Lesser General Public License name variants encountered in dependency metadata. The change was made because some dependencies have known upstream licenses but do not publish license metadata in a form detected by the Gradle license report plugin. Previously, these dependencies were permitted through module-specific null-license exceptions, leaving incomplete information in the generated report. The new mechanism supplies verified metadata without overriding valid metadata published by dependencies. --- ## Checklist ### General - [ ] I have read the [Contribution Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md) - [ ] I have read the [Stirling-PDF Developer Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md) (if applicable) - [ ] I have read the [How to add new languages to Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md) (if applicable) - [ ] I have performed a self-review of my own code - [ ] My changes generate no new warnings ### Documentation - [ ] I have updated relevant docs on [Stirling-PDF's doc repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/) (if functionality has heavily changed) - [ ] I have read the section [Add New Translation Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags) (for new translation tags only) ### Translations (if applicable) - [ ] I ran [`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md) ### UI Changes (if applicable) - [ ] Screenshots or videos demonstrating the UI changes are attached (e.g., as comments or direct attachments in the PR) ### Testing (if applicable) - [ ] I have run `task check` to verify linters, typechecks, and tests pass - [ ] I have tested my changes locally. Refer to the [Testing Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing) for more details.
241 lines
5.3 KiB
JSON
241 lines
5.3 KiB
JSON
{
|
|
"allowedLicenses": [
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "BSD License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The BSD License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "BSD-2-Clause"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "BSD 2-Clause License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The 2-Clause BSD License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "BSD-3-Clause"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The BSD 3-Clause License (BSD3)"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "BSD-4 License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Revised BSD"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "ISC"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "MIT"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "MIT License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The MIT License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "MIT-0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "MIT license"
|
|
},
|
|
{
|
|
"moduleName": "com.github.jai-imageio:jai-imageio-core",
|
|
"moduleLicense": "LICENSE.txt"
|
|
},
|
|
{
|
|
"moduleName": "com.github.jai-imageio:jai-imageio-jpeg2000",
|
|
"moduleLicense": "LICENSE-JJ2000.txt, LICENSE-Sun.txt"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache 2"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache-2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache-2.0 License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache License 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache License Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache License version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache License, Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Apache License, version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The Apache License, Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The Apache Software License, Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": "com.nimbusds:oauth2-oidc-sdk",
|
|
"moduleLicense": "\"Apache License, version 2.0\";link=\"https://www.apache.org/licenses/LICENSE-2.0.html\""
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "MPL 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Mozilla Public License, Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Mozilla Public License 2.0 (MPL-2.0)"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Mozilla Public License Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "CDDL+GPL License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "BSD"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "UnboundID SCIM2 SDK Free Use License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "GPL2 w/ CPE"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "GPLv2+CE"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "GNU GENERAL PUBLIC LICENSE, Version 2 + Classpath Exception"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "GNU Lesser Public License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The GNU Lesser General Public License"
|
|
},
|
|
{
|
|
"moduleName": "com.martiansoftware:jsap",
|
|
"moduleLicense": "LGPL"
|
|
},
|
|
{
|
|
"moduleName": "org.hibernate.orm:hibernate-core",
|
|
"moduleLicense": "GNU Library General Public License v2.1 or later"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License 1.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License - v 1.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License v2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License v. 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License - v 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License - Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Eclipse Public License, Version 2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "EPL-2.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "LGPL-2.1-only"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Ubuntu Font Licence 1.0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Bouncy Castle Licence"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "Public Domain, per Creative Commons CC0"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "The W3C License"
|
|
},
|
|
{
|
|
"moduleName": "com.google.re2j:re2j",
|
|
"moduleLicense": "Go License"
|
|
},
|
|
{
|
|
"moduleName": ".*",
|
|
"moduleLicense": "UnRar License"
|
|
}
|
|
]
|
|
}
|