search

nexB / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
https://github.com/nexB/scancode-toolkit/releases/
2.03k stars 533 forks source link

Add support for chromium and fuschia package manifest "README" #942

Open pombredanne opened 6 years ago

pombredanne commented 6 years ago

Some metadata and readme files are structured or semi-structured. We could parse them to extract package-liceke information and declarations.

See https://github.com/fuchsia-mirror/third_party-libvpx/blob/master/README.fuchsia and this: https://src.chromium.org/viewvc/chrome/trunk/src/third_party/README.chromium.template

Another example: https://chromium.googlesource.com/android_tools/+/9a70d48fcdd68cd0e7e968f342bd767ee6323bd1/sdk/platform-tools/systrace/catapult/telemetry/third_party/tsproxy/README.chromium

Some more and https://github.com/qt/qtwebengine-chromium/blob/b45f07bfbe74c333f1017810c2409e1aa6077a1b/chromium/third_party/PRESUBMIT.py

See also AUTHORS, and various METADATA files:

Some pointers: https://github.com/search?q=filename%3Areadme.chromium&type= https://github.com/search?q=filename%3Areadme.facebook&type= https://github.com/search?q=filename%3Areadme.google&type= https://github.com/search?q=filename%3Areadme.thirdparty&type= https://github.com/search?q=filename%3Areadme.android&type= https://github.com/search?q=filename%3Ametadata.bzl&type= https://github.com/search?q=filename%3Ametadata.json&type= https://github.com/PixelExperience/external_libaom/blob/ten/README.version https://github.com/PixelExperience/external_libaom/blob/ten/README.android

techytushar commented 6 years ago

@pombredanne do we have to edit these templates and place them inside packagescan folder?

pombredanne commented 6 years ago

@techytushar this would be creating a new package object. Since the code is in flux until the #275 work is merged, I would not work on this just now.

pombredanne commented 5 years ago

Another example: https://chromium.googlesource.com/android_tools/+/9a70d48fcdd68cd0e7e968f342bd767ee6323bd1/sdk/platform-tools/systrace/catapult/telemetry/third_party/tsproxy/README.chromium

pombredanne commented 2 years ago

@JonoYang I think this is implemented now... Can you confirm?