composer / spdx-licenses Goto Github PK

Outdated to 1.3.0

They're published in different formats (including JSON) at https://github.com/spdx/license-list-data

It's probably going to be more reliable in the long-term to parse these files instead of screen-scraping the HTML.

• Update namespaces to Composer\Spdx or something
• Add README
• Add LICENSE with MIT
• Add composer.json
• Add phpunit.xml.dist, .travis.yml, and make sure tests run

Not sure if I am missing anything but I probably am :)

Has been removed from https://spdx.org/licenses/index.html

The SPDX License List 3.0 was released last week:

• https://lists.spdx.org/pipermail/spdx-tech/2017-December/003491.html
• https://spdx.org/licenses/

Ensuring that deps in vendor/ have a license compatible with the root project is a tough task.

Other projects exist in js/Rust/Ruby/etc. I computed the following list of interest:

• https://github.com/HansHammel/license-compatibility-checker/
• https://github.com/jpvillaisaza/licensor
• https://github.com/timelsass/wp-license-compatibility/
• https://github.com/Nemo157/cargo-lichking/blob/
• https://github.com/librariesio/license-compatibility/

Later on, we could build a composer plugin like this on top:

• https://github.com/codepunkt/webpack-license-plugin/

This could be a great contribution if anyone is up to learn about the topic and contribute a PR here, if the maintainers agree?

Help wanted.

Please consider removing tests from .gitattributes.
This make downstream CI easier.
(really small)

See http://blog.remirepo.net/post/2014/08/12/Koschei-continuous-integration-of-PHP-stack-in-Fedora

Oh crap, sorry that's what happens when you release late on Friday heh.. Good thing I saw this before heading to bed ;) Fixed now.

Originally posted by @Seldaek in composer/getcomposer.org#209 (comment)

Is there a way to set a package licensing as "private" or "all rights reserved". We use this on a project that has a mix of public and private packages to validate the licenses but on the private packages, we would like to be able to specify that the package is unlicensed and cannot be distributed.

NPM as added a similar option to their system and it would be really nice here.

Thanks

I don't see any usage of JsonSchema namespace in the code.

See "phpcompatinfo ananyser:run src" report

Classes Analysis
Class                             Matches REF  EXT min/Max PHP min/Max PHP all 
Composer\Spdx\SpdxLicenses        2       user             5.3.0               
Composer\Spdx\SpdxLicensesUpdater         user             5.3.0               
DOMDocument                       2       dom  5.0.0       5.0.0               
DOMXPath                          2       dom  5.0.0       5.0.0               
InvalidArgumentException          2       spl  5.1.0       5.1.0               
RuntimeException                  1       spl  5.1.0       5.1.0               
self                              2       Core 5.0.0       5.0.0               
Total [7]                                                  5.3.0