eclipse-score / eclipse-score/persistency
Project content being sent to the Eclipse Dash License Tool
- Dominant language
- Rust
- Stars
- 2
- Forks
- 28
- Avg merge
- 2d 16h
- Merged PRs (30d)
- 32
Description
### Description
The [Eclipse Dash License Tool](https://github.com/eclipse-dash/dash-licenses) doesn't generally know how to distinguish project content from third party content. It really only knows how to do licence checks for the content identifiers that you provide.
Several issues were open in IPLab for content that is clearly project code.
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29776
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29775
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29774
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29773
Since these issues represent project content that has not been published to `crates.io`, IPLab doesn't know how to find the source code or engage in a review. We don't actually require project reviews, so the easiest solution here is to just close these issues. However, if I close them, the Eclipse Dash License Tool will create replacements the next time you run it (under the same conditions). A better solution is to configure your request so that it doesn't try to vet project content.
I imagine that there is some configuration that can get `crates` to do the work for us, but I've found that using `grep` gets the job done. Starting from the `Cargo.lock` file in the repository root, the following examples excludes all of the content that I understand to be project content:
```
$ cargo tree -e normal --prefix none --no-dedupe | sort -u \
| grep -v '^[[:space:]]*$' \
| grep -v score_log | grep -v rust_kvs | grep -v test_scenarios \
| sed -E 's|([^ ]+) v([^ ]+).*|crate/cratesio/-/\1/\2|'
```
If you pipe that into the Eclipse Dash License Tool, you'll get better results.
If you are are of options that will help `crates` do the work, I'd love to hear about it.
/FYI @umaucher @rahulmohang
### Analysis results
_No response_
### Solution
_No response_
### Error Occurrence Rate
None
### How to reproduce
_No response_
### Supporting Information
_No response_
### Classification
Minor
### First Affected Release
not released (main)
### Last Affected Release
not released (main)
### Expected Fixed Release
before release (main)
### Category
- [ ] Safety Relevant
- [ ] Security Relevant
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.