Pil0tXia commented on issue #4720:
URL: https://github.com/apache/eventmesh/issues/4720#issuecomment-2051357064

   I found that the plugin https://github.com/jk1/Gradle-License-Report has 
been introduced in the project to generate plugin reports. However, the LICENSE 
file is exported to the `build/reports/dependency-license` path only if the 
third-party dependency jar package contains the LICENSE file. It exports 139 
copies of LICENSE, far fewer than the 306 third-party dependencies the project 
is currently using.
   
   While the html report it generates declares 300+ dependencies in full, it 
does not provide the contents of the LICENSE file for each one. Trying to 
generate a LICENSE file for a project using html as a data source is difficult.
   
   The existing LICENSE file for the project has only 200+ dependencies in it, 
which is also incomplete. It seems that this plugin is hardly a help for 
generating LICENSE files.
   
   However, the json file generated by cyclonedx-gradle-plugin is too huge. I 
am writing gradle scripts based on its data format.
   
   https://github.com/apache/eventmesh/pull/4827 mainly addresses the 
dependencies problem. I'll address license problem in another PR.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to