eclipse-score / eclipse-score/persistency

Project content being sent to the Eclipse Dash License Tool

Open
#347 0 comments 0 reactions 1 assignee Claimed by @umaucher View on GitHub
Dominant language
Rust
Stars
2
Forks
28
Avg merge
2d 16h
Merged PRs (30d)
32

Description

### Description

The [Eclipse Dash License Tool](https://github.com/eclipse-dash/dash-licenses) doesn't generally know how to distinguish project content from third party content. It really only knows how to do licence checks for the content identifiers that you provide.

Several issues were open in IPLab for content that is clearly project code.

- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29776
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29775
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29774
- https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/29773

Since these issues represent project content that has not been published to `crates.io`, IPLab doesn't know how to find the source code or engage in a review. We don't actually require project reviews, so the easiest solution here is to just close these issues. However, if I close them, the Eclipse Dash License Tool will create replacements the next time you run it (under the same conditions). A better solution is to configure your request so that it doesn't try to vet project content.

I imagine that there is some configuration that can get `crates` to do the work for us, but I've found that using `grep` gets the job done. Starting from the `Cargo.lock` file in the repository root, the following examples excludes all of the content that I understand to be project content:

```
$ cargo tree -e normal --prefix none --no-dedupe | sort -u \
| grep -v '^[[:space:]]*$' \
| grep -v score_log | grep -v rust_kvs | grep -v test_scenarios \
| sed -E 's|([^ ]+) v([^ ]+).*|crate/cratesio/-/\1/\2|'
```

If you pipe that into the Eclipse Dash License Tool, you'll get better results.

If you are are of options that will help `crates` do the work, I'd love to hear about it.

/FYI @umaucher @rahulmohang

### Analysis results

_No response_

### Solution

_No response_

### Error Occurrence Rate

None

### How to reproduce

_No response_

### Supporting Information

_No response_

### Classification

Minor

### First Affected Release

not released (main)

### Last Affected Release

not released (main)

### Expected Fixed Release

before release (main)

### Category

- [ ] Safety Relevant
- [ ] Security Relevant

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.