Package configurations created with orth package-configuration create do not filter out paths outside of the path specified by a VCS curation for the same package.
Initialize orthw with the directory using orthw init file://${PWD}/evaluation-result.json
Generate a package configuration for the logback package via orthw pc-create Maven:ch.qos.logback:logback-classic:1.4.14
Wrote a package configuration to '/Volumes/Workspace/tsteenbe/ort-config/package-configurations/Maven/ch.qos.logback/logback-classic/1.4.14/vcs.yml'.
As my local ort-config copy contains below curations for Maven:ch.qos.logback:logback-classic (see evaluation-result.json)
- id: "Maven:ch.qos.logback:logback-classic"
curations:
comment: |
Package resides in its own directory within project's code repository.
vcs:
path: "logback-classic"
- id: "Maven:ch.qos.logback:logback-classic:[1.0.2,)"
curations:
comment: |
Mapping based on https://github.com/qos-ch/logback/blob/v_1.0.2/LICENSE.txt and
https://repo1.maven.org/maven2/ch/qos/logback/logback-parent/1.0.2/logback-parent-1.0.2.pom
which refers to http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html but
declared_license_mapping:
"Eclipse Public License - v 1.0": "EPL-1.0 OR LGPL-2.1-only"
"GNU Lesser General Public License": "EPL-1.0 OR LGPL-2.1-only"
Environment
ORT version: 22.6.0-036.sha.56bc621
Java version: JDK 11.0.22+7, running under Java 11.0.22.
Package configurations created with
orth package-configuration create
do not filter out paths outside of the path specified by a VCS curation for the same package.To Reproduce
Steps to reproduce the behavior:
mkdir pc-create-bug && cd pc-create-bug
orthw init file://${PWD}/evaluation-result.json
orthw pc-create Maven:ch.qos.logback:logback-classic:1.4.14
Wrote a package configuration to '/Volumes/Workspace/tsteenbe/ort-config/package-configurations/Maven/ch.qos.logback/logback-classic/1.4.14/vcs.yml'.Expected behavior
A package configuration with only
logback-core
path excludes should be generatedAs my local ort-config copy contains below curations for
Maven:ch.qos.logback:logback-classic
(see evaluation-result.json)Environment