search

cashapp / licensee

Gradle plugin which validates the licenses of your dependency graph match what you expect
https://cashapp.github.io/licensee/docs/1.x/
Apache License 2.0
638 stars 30 forks source link

License-url `http://www.eclipse.org/org/documents/edl-v10.php` specified as `unknown`, but it should be `EPL-1.0` #135

Open mervyn-mccreight opened 2 years ago

mervyn-mccreight commented 2 years ago

When having e.g. org.glassfish.jaxb:jaxb-core:4.0.0 in your dependency tree, the license check fails with the statement that the license-url http://www.eclipse.org/org/documents/edl-v10.php is unknown. But as far as I can see this should resolve to "EPL-1.0" as defined in licenses.kt.

I'm using version 1.6.0.

Here are a few examples for dependencies having the same problem:

com.sun.istack:istack-commons-runtime:4.1.1
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
jakarta.activation:jakarta.activation-api:2.1.0
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
jakarta.xml.bind:jakarta.xml.bind-api:4.0.0
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
org.eclipse.angus:angus-activation:1.0.0
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
org.glassfish.jaxb:jaxb-core:4.0.0
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
org.glassfish.jaxb:jaxb-runtime:4.0.0
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
org.glassfish.jaxb:txw2:4.0.0
 - ERROR: Unknown license URL 'http://www.eclipse.org/org/documents/edl-v10.php' is NOT allowed
JakeWharton commented 2 years ago

I'll give it a test today and debug why the fallback isn't being picked up.

mervyn-mccreight commented 2 years ago

If PRs are welcome I'm happy to help and look into it by myself

JakeWharton commented 2 years ago

I forgot I was off Friday and I have stuff for the next two weeks. If you want to look that'd be welcome. Otherwise I will circle back when I'm free again.