license-check | Make sure your Maven dependencies | Build Tool library

by mrice Java Version: Current License: MIT

X-Ray Key Features Code Snippets Community Discussions(5)Vulnerabilities Install Support

kandi X-RAY | license-check Summary

license-check is a Java library typically used in Utilities, Build Tool, Maven applications. license-check has no vulnerabilities, it has build file available, it has a Permissive License and it has low support. However license-check has 3 bugs. You can download it from GitHub, Maven.

Current version: 0.5.3 (Sep 5, 2015). License-check looks at each dependency and runs a query against your Maven respository to see if the dependency declares a license that it recognizes. If not, then your build will fail. (Don’t worry if you’re hoping for a different result, there’s a way around this if your dependency isn’t clear on its licensing. See the configuration options below.). Isn’t there already something like this?.

Support

Quality

Security

License

Reuse

Support

license-check has a low active ecosystem.

It has 32 star(s) with 20 fork(s). There are 2 watchers for this library.

It had no major release in the last 6 months.

There are 13 open issues and 4 have been closed. On average issues are closed in 200 days. There are 10 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of license-check is current.

Quality

license-check has 3 bugs (1 blocker, 0 critical, 2 major, 0 minor) and 26 code smells.

Security

license-check has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

license-check code analysis shows 0 unresolved vulnerabilities.

There are 1 security hotspots that need review.

License

license-check is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

license-check releases are not available. You will need to build from source code and install.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Installation instructions are not available. Examples and code snippets are available.

It has 546 lines of code, 21 functions and 4 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed license-check and discovered the below as its top functions. This is intended to give you an instant insight into license-check implemented functionality, and help decide if they suit your requirements.

Executes the Mojo tool
Converts an array of strings to lowercase
Checks if an artifact is on the exclude list
Set the regular expression to use
Set the license name
Set the code
Gets the regular expression
Returns the preference code
Checks if set contains template
Checks if a template is contained in the exclude set
Load the licenses
Converts a string array into a list of Pattern objects
Converts the given license name to a code version
Reads the pom contents from a file
Retrieve an artifact from the remote repository
Extract the license name from the raw text
Recursive method to search for the licenses of the given artifact
Extracts parent coordinates
Convert an artifact to coordinates coordinates

Get all kandi verified functions for this library.

license-check Key Features

No Key Features are available at this moment for license-check.

license-check Examples and Code Snippets

No Code Snippets are available at this moment for license-check.

Community Discussions

Trending Discussions on license-check

How to use Vaadin FLOW server-push with Spring Boot

Parse JSON to multiple Typescript objects

Automating the license checking in gitlab CI/CD pipeline

How to print the licenses used in my project using Go Modules?

Sonarqube - how to enable license-checker for Kotlin projects?

QUESTION

How to use Vaadin FLOW server-push with Spring Boot

Asked 2021-Jun-22 at 07:45

When I use the @Push annotation on a view I get the following exception (JDK 16, Vaadin 19.0.7, Spring boot 2.4.7):

...

ANSWER

Answered 2021-Jun-22 at 07:45

You must add annotation for the "whole" application (which @Push is) to your central configuration place (which is the class implementing AppShellConfigurator). As the error states:

Source https://stackoverflow.com/questions/68047352

QUESTION

Parse JSON to multiple Typescript objects

Asked 2021-Feb-11 at 13:57

I know that there are already multiple questions about parsing JSON files in Typescript, but non of these helped me.

I'm trying to parse the result of the license-checker output which is a json:

...

ANSWER

Answered 2021-Feb-11 at 13:40

Okay I found out how to handle this.

I can iterate over the Object, that contains values by

Source https://stackoverflow.com/questions/66155015

QUESTION

Automating the license checking in gitlab CI/CD pipeline

Asked 2020-Aug-02 at 17:00

I am trying to implement the license checking of the installed packages in my react project on a GitLab CI/CD pipeline. Before the build stage, the pipeline should check all the available licenses and then whitelist or blacklist certain specified licenses.

I am using the license-checker package to implement a list of available licenses in a JSON file. After executing the required command: license-checker --json > ./license.json, the output is:

license.json

...

ANSWER

Answered 2020-Jul-30 at 03:19

I think this is because of the folder didn't exist till the time you were checking json file in it.

What my recommendation is provide the before script for running the build and then search for the json file in the folder like you are doing in your step definition.

Source https://stackoverflow.com/questions/63147939

QUESTION

How to print the licenses used in my project using Go Modules?

Asked 2020-Apr-08 at 05:05

For legal reasons, I need a list of licenses (e.g. MIT, Apache) the dependencies (direct and transient libraries) my project uses. I only know how to print a list of dependencies without licenses.

Is there a way to print a list of dependencies with licenses for Go Modules? Similar to what is done in npm (NPM License Checker) and Gradle (Gradle License Report). Thanks!

...

ANSWER

Answered 2020-Apr-08 at 05:05

Have you tried github.com/google/go-licenses?

Run

Source https://stackoverflow.com/questions/61040687

QUESTION

Sonarqube - how to enable license-checker for Kotlin projects?

Asked 2020-Mar-12 at 09:37

I'm setting up a Sonarqube Developer Edition server and am trying to use the license-checker plugin I got from:

https://github.com/porscheinformatik/sonarqube-licensecheck

The plugin's jar is deployed to the correct directory and I have created a new Sonar way (license) Java profile that inherits the profile Sonar way (Built-in). In the new profile, I added the "License is not allowed" and "Dependency has unknown license" rules the plugin requires to work. I tested with a Java project and it works flawlessly.

I tried the same approach for the Kotlin profile Sonar way (license) I created and that inherits the Sonar way (Built-in) profile. But these rules are not available to Kotlin and, thus, the License check plugin does not run when I attempt to analyze a Kotlin project.

This seems to be a Java-specific plugin, but I might be mistaken. Is there a way to get this working I am not realizing?

...

ANSWER

Answered 2020-Mar-12 at 09:37

Long story short, the plugin does not support my scenario.

Long story, my question was not clear enough and I failed to put some information as I was learning about this build myself. The project is in Kotlin and uses gradle to handle dependencies. The plugin only supports maven and NPM builds. So, for my to achieve the desired result, I would need to extend the plugin to handle the build.gradle.kts file. This task is a very big question mark in itself, so I will be looking at another alternative for the time being.

Source https://stackoverflow.com/questions/60622880

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install license-check

You can download it from GitHub, Maven.
You can use license-check like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the license-check component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: