search

eclipse-cbi / macos-notarization-service

REST Service to notarize macOS application bundles and DMG
Eclipse Public License 2.0
6 stars 3 forks source link

Integrate dash-license check workflow #265

Open netomi opened 11 months ago

netomi commented 11 months ago

We should eat our own dogfood and integrate the dash-license workflow into this project for demonstration and getting knowledge about it.

https://github.com/eclipse/dash-licenses/blob/master/.github/workflows/mavenLicenseCheck.yml

netomi commented 10 months ago

Running the license check on this project revreals these unvetted dependencies:

[INFO] maven/mavencentral/io.quarkus.arc/arc/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-apache-httpclient/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-arc/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-bootstrap-runner/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-core/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-credentials/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-development-mode-spi/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-ide-launcher/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-jsonb/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-jsonp/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-mutiny/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-netty/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-rest-client-config/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-rest-client/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-resteasy-common/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-resteasy-jsonb/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-resteasy-multipart/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-resteasy-server-common/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-resteasy/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-security-runtime-spi/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-smallrye-context-propagation/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-vertx-http/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-vertx-latebound-mdc-provider/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-vertx/3.5.0
[INFO] maven/mavencentral/io.quarkus/quarkus-virtual-threads/3.5.0
[INFO] maven/mavencentral/io.smallrye.config/smallrye-config-common/3.4.1
[INFO] maven/mavencentral/io.smallrye.config/smallrye-config-core/3.4.1
[INFO] maven/mavencentral/io.smallrye.config/smallrye-config/3.4.1
[INFO] maven/mavencentral/io.smallrye.reactive/mutiny-smallrye-context-propagation/2.5.1
[INFO] maven/mavencentral/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common/3.6.0
[INFO] maven/mavencentral/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common/3.6.0
[INFO] maven/mavencentral/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template/3.6.0
[INFO] maven/mavencentral/io.smallrye.reactive/smallrye-mutiny-vertx-web-common/3.6.0
[INFO] maven/mavencentral/io.smallrye.reactive/smallrye-mutiny-vertx-web/3.6.0
[INFO] maven/mavencentral/io.smallrye/jandex/3.1.5
[INFO] maven/mavencentral/jakarta.json.bind/jakarta.json.bind-api/3.0.0
[INFO] maven/mavencentral/org.jboss.resteasy.microprofile/microprofile-config/2.1.4.Final
[INFO] maven/mavencentral/org.jboss.resteasy.microprofile/microprofile-rest-client-base/2.1.4.Final
[INFO] maven/mavencentral/org.jboss.resteasy.microprofile/microprofile-rest-client/2.1.4.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-cdi/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-client/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-core-spi/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-core/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-jaxb-provider/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-json-binding-provider/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-json-p-provider/6.2.5.Final
[INFO] maven/mavencentral/org.jboss.resteasy/resteasy-multipart-provider/6.2.5.Final

which is a bit surprising, as quarkus is quite heavily used.