Add license_finder to the build process

7 years ago · 06f580a0cf
parent c79da3692c
commit 06f580a0cf
8 changed files with 306 additions and 14 deletions
--- a/.tool-versions
+++ b/.tool-versions
@ -1,2 +1,3 @@
 elixir 1.5.3
 erlang 20.2
+ruby 2.4.1
--- a/8
+++ b/8
@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+source 'https://rubygems.org'
+
+group :development do
+  gem 'license_finder', require: false
+  gem 'pivotal_git_scripts', require: false
+end
--- a/Gemfile.lock
+++ b/Gemfile.lock
@ -0,0 +1,32 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    httparty (0.15.6)
+      multi_xml (>= 0.5.2)
+    license_finder (5.0.0)
+      bundler
+      httparty
+      rubyzip
+      thor
+      toml (= 0.2.0)
+      with_env (> 1.0)
+      xml-simple
+    multi_xml (0.6.0)
+    parslet (1.8.1)
+    pivotal_git_scripts (1.4.0)
+    rubyzip (1.2.1)
+    thor (0.20.0)
+    toml (0.2.0)
+      parslet (~> 1.8.0)
+    with_env (1.1.0)
+    xml-simple (1.1.5)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  license_finder
+  pivotal_git_scripts
+
+BUNDLED WITH
+   1.13.6
--- a/assets/brunch-config.js
+++ b/assets/brunch-config.js
@ -10,15 +10,15 @@ exports.config = {
      // To use a separate vendor.js bundle, specify two files path
      // http://brunch.io/docs/config#-files-
      // joinTo: {
-      //   "js/app.js": /^js/,
-      //   "js/vendor.js": /^(?!js)/
+      //   'js/app.js': /^js/,
+      //   'js/vendor.js': /^(?!js)/
      // }
      //
      // To change the order of concatenation of files, explicitly mention here
      // order: {
      //   before: [
-      //     "vendor/js/jquery-2.1.1.js",
-      //     "vendor/js/bootstrap.min.js"
+      //     'vendor/js/jquery-2.1.1.js',
+      //     'vendor/js/bootstrap.min.js'
      //   ]
      // }
    },
@ -34,8 +34,8 @@ exports.config = {

  conventions: {
    // This option sets where we should place non-css and non-js assets in.
-    // By default, we set this to "/assets/static". Files in this directory
-    // will be copied to `paths.public`, which is "priv/static" by default.
+    // By default, we set this to '/assets/static'. Files in this directory
+    // will be copied to `paths.public`, which is 'priv/static' by default.
    assets: /^(static)/
  },

@ -59,7 +59,7 @@ exports.config = {
      precision: 8,
      allowCache: true,
      options: {
-        includePaths: ["node_modules/normalize-scss/sass"]
+        includePaths: ['node_modules/normalize-scss/sass']
      }
    }
  },
--- a/assets/package-lock.json
+++ b/assets/package-lock.json
@ -1008,11 +1008,6 @@
        "hoek": "2.16.3"
      }
    },
-    "bootstrap-sass": {
-      "version": "3.3.7",
-      "resolved": "https://registry.npmjs.org/bootstrap-sass/-/bootstrap-sass-3.3.7.tgz",
-      "integrity": "sha1-ZZbHq0D2Y3OTMjqwvIDQZPxjBJg="
-    },
    "bower-config": {
      "version": "1.4.1",
      "resolved": "https://registry.npmjs.org/bower-config/-/bower-config-1.4.1.tgz",
--- a/assets/package.json
+++ b/assets/package.json
@ -4,8 +4,8 @@
    "url": "git+https://github.com/poanetwork/poa-explorer.git"
  },
  "private": true,
+  "name": "poa-explorer",
  "author": "POA Network",
-  "license": "UNLICENSED",
  "engines": {
    "node": "8.x",
    "npm": "5.x"
@ -17,7 +17,6 @@
    "eslint": "eslint js/**"
  },
  "dependencies": {
-    "bootstrap-sass": "^3.3.7",
    "normalize-scss": "^7.0.0",
    "phoenix": "file:../deps/phoenix",
    "phoenix_html": "file:../deps/phoenix_html"
--- a/circle.yml
+++ b/circle.yml
@ -27,12 +27,17 @@ dependencies:
    - if ! asdf | grep version; then git clone https://github.com/HashNuke/asdf.git ~/.asdf; fi
    - if ! asdf plugin-list | grep erlang; then asdf plugin-add erlang https://github.com/HashNuke/asdf-erlang.git; fi
    - if ! asdf plugin-list | grep elixir; then asdf plugin-add elixir https://github.com/HashNuke/asdf-elixir.git; fi
+    - if ! asdf plugin-list | grep ruby; then asdf plugin-add ruby https://github.com/HashNuke/asdf-ruby.git; fi
    - awk '/erlang/ { print $2 }' .tool-versions | xargs asdf install erlang:
        timeout: 3600
    - awk '/elixir/ { print $2 }' .tool-versions | xargs asdf install elixir:
        timeout: 3600
+    - awk '/ruby/ { print $2 }' .tool-versions | xargs asdf install ruby:
+        timeout: 3600
+    - gem install bundler
  override:
    - yes | mix do deps.get, local.rebar, deps.compile, compile
+    - bundle check --path=vendor/bundle || bundle install --path=vendor/bundle --jobs=4 --retry=3
    - mix dialyzer --plt
    - cd assets && npm install && npm run build && cd ..
  cache_directories:
@ -40,12 +45,15 @@ dependencies:
    - _build
    - deps
    - assets/node_modules
+    - vendor/bundle

 test:
  pre:
    - mix credo
    - mix sobelow --private --compact --exit Low
    - mix dialyzer --halt-exit-status
+    - bundle exec license_finder --project-path=. --decisions-file=doc/dependency_decisions.yml
+    - bundle exec license_finder --project-path=assets --decisions-file=doc/dependency_decisions.yml
    - cd assets && npm run eslint -- --format=junit --output-file="$CIRCLE_TEST_REPORTS/eslint/junit.xml" && cd ..
  override:
    - mix test
--- a/doc/dependency_decisions.yml
+++ b/doc/dependency_decisions.yml
@ -0,0 +1,249 @@
+---
+- - :whitelist
+  - MIT
+  - :who: Doc Ritezel
+    :why: Pre-approved
+    :versions: []
+    :when: 2018-01-29 00:00:00.000000000 Z
+- - :whitelist
+  - ISC
+  - :who: Doc Ritezel
+    :why: Pre-approved
+    :versions: []
+    :when: 2018-01-29 00:00:00.000000000 Z
+- - :whitelist
+  - New BSD
+  - :who: Doc Ritezel
+    :why: Pre-approved
+    :versions: []
+    :when: 2018-01-29 00:00:00.000000000 Z
+- - :whitelist
+  - Apache 2.0
+  - :who: Doc Ritezel
+    :why: Pre-approved
+    :versions: []
+    :when: 2018-01-29 00:00:00.000000000 Z
+- - :whitelist
+  - DWTFYWTPL
+  - :who: Doc Ritezel
+    :why: Pre-approved
+    :versions: []
+    :when: 2018-01-29 00:00:00.000000000 Z
+- - :whitelist
+  - Simplified BSD
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:07:28.529920000 Z
+- - :whitelist
+  - BSD
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:07:33.639610000 Z
+- - :whitelist
+  - CC0-1.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:03:40.487695000 Z
+- - :whitelist
+  - Public Domain
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:03:40.487695000 Z
+- - :whitelist
+  - Unlicense
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:03:40.487695000 Z
+- - :whitelist
+  - ruby
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:03:40.487695000 Z
+- - :license
+  - ecto
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:00:00.000000000 Z
+- - :license
+  - set_locale
+  - DWTFYWTPL
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:50:47.514520000 Z
+- - :license
+  - postgrex
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:51:23.470100000 Z
+- - :license
+  - poison
+  - CC0-1.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:51:52.519286000 Z
+- - :license
+  - plug
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:52:14.254242000 Z
+- - :license
+  - ethereumex
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:52:47.031205000 Z
+- - :license
+  - hackney
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:53:32.763607000 Z
+- - :license
+  - gettext
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:53:50.601029000 Z
+- - :license
+  - gen_stage
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:54:18.188006000 Z
+- - :license
+  - db_connection
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 00:54:36.494213000 Z
+- - :license
+  - phoenix_live_reload
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:00:27.447229000 Z
+- - :license
+  - dialyxir
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:00:51.180725000 Z
+- - :license
+  - decimal
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:01:08.182752000 Z
+- - :license
+  - file_system
+  - DWTFYWTPL
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:01:35.443848000 Z
+- - :license
+  - mime
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:01:59.697732000 Z
+- - :license
+  - wordwrap
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:05:43.989619000 Z
+- - :license
+  - path-is-inside
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:06:19.430415000 Z
+- - :license
+  - true-case-path
+  - Apache 2.0
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:06:35.683192000 Z
+- - :license
+  - spdx-expression-parse
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:06:48.440333000 Z
+- - :license
+  - rc
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:06:56.719276000 Z
+- - :license
+  - amdefine
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:07:04.040453000 Z
+- - :license
+  - normalize-scss
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:07:04.040453000 Z
+- - :license
+  - optimist
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:07:04.040453000 Z
+- - :license
+  - ua-parser-js
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:07:04.040453000 Z
+- - :license
+  - indexof
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 01:10:35.556773000 Z
+- - :license
+  - bundler
+  - MIT
+  - :who: 
+    :why: 
+    :versions: []
+    :when: 2018-01-29 02:58:26.066580000 Z