search

aboutcode-org / aboutcode-toolkit

:white_check_mark: AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.
93 stars 42 forks source link

Introduce component field for component #340

Closed chinyeungli closed 3 months ago

chinyeungli commented 6 years ago

Here is how we will treat components:

about_resource: boolean.py-3.6-py2.py3-none-any.whl

md5: da39999eb131b589e84ad935dc4ca642
sha1: d31b55e7ad2ee917232b3213afe3ae9678156a9f

download_url: https://files.pythonhosted.org/boolean.py-3.6-py2.py3-none-any.whl

component:
    name: boolean.py
    version: '3.6'
    description: Implements boolean algebra in one module.
    owner: Sebastian Kraemer
    license_expression: bsd-new

copyright: Copyright (c) 2009-2016 Sebastian Kraemer, basti.kr@gmail.com and others

homepage_url: https://github.com/bastikr/boolean.py

license_expression: bsd-simplified
license_file: bsd-simplified.LICENSE

notice_file: boolean.py-3.6-py2.py3-none-any.whl.NOTICE
notice_url: https://github.com/bastikr/boolean.py/blob/master/LICENSE.txt

attribute: true
mjherzog commented 4 years ago

This approach is a good way to accommodate Component data. We will need to enhance Attribution Generation so that it can recognize and produce an Attribution Notice based on Component data.

chinyeungli commented 3 years ago

actually do we still want this? It seems everything fall under file/package level instead of component?

chinyeungli commented 3 months ago

obsolete