slachiewicz opened a new pull request, #319: URL: https://github.com/apache/maven-remote-resources-plugin/pull/319
Part of #316. This adds `$spdx` to the Velocity context, with two methods: - `$spdx.id($license)` resolves a declared license to an SPDX ID or expression. It tries the name as an ID, as an expression and as a known alias, then the URL as a known alias or as an `opensource.org` or `spdx.org` URL that ends in an ID. It returns null when nothing matches or when the name and URL resolve to different IDs. - `$spdx.expression($dependency)` joins a dependency's license IDs with `OR`, because the POM model treats several licenses as a choice. It returns null when any of them is unresolved. The aliases in `license-aliases.txt` are our own, not a copy of the SPDX License List, which is published without a licence that clears it for an ASF source release. GNU URLs and unversioned GNU names map to nothing on purpose, since they don't say whether "only" or "or later" applies. This PR does not add a parameter for project-specific aliases; #316 tracks that. Verified: resolved 2,386 of 2,597 license declarations (91.9%) across 6,516 POMs in a local repository. The table was built from the same POMs, so expect a lower rate elsewhere. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
