Curations and configuration files for the OSS Review Toolkit.

OSS Review Toolkit

Last update: Dec 8, 2022

Related tags

Kotlin ort-config

Overview

ORT Config

This repository contains configuration files for the OSS Review Toolkit.

Content

Curations

The curations directory contains package curations for open source packages.

Package curations submitted to this repository must adhere to the following rules:

Declaring authors, declared licenses, and concluded licenses is currently not allowed.
Curations that apply to whole namespaces by only setting the type and namespace of the identifier are not allowed.
The curation file path must be curations/[type]/[namespace]/[name].yml. If the namespace is empty, use "_". For example a curation for the package NuGet::Azure.Core:1.2.0 must be in the file curation/NuGet/_/Azure.Core.yml.

Package configurations containing license finding curations or path excludes are not yet supported.

Tools

The tools directory contains tools that help generating curations.

Usage

To use the configuration provided by this repository, it needs to be cloned, and the files need to be passed to the respective options of the ORT CLI commands. For example, to use the curations with the ORT analyzer:

ort analyze --package-curations-dir [path-to-curations-dir]

Using this repository together with ORT will be simplified in future.

Contribute

This repository is currently in incubation and not yet ready for contributions.

License

See the LICENSE file in the root of this project for license details.

OSS Review Toolkit (ORT) is a Linux Foundation project and part of ACT.

Comments

license-classification: Drop the redundant 'strong-copyleft' category

The categories 'copyleft' and 'strong-copyleft' have identical semantics, while 'copyleft' has more usages and aligns with ScanCode's category name. So, align on using 'copyleft' as category for "Strong Copyleft" licenses.

Part of #59.

opened by fviernau 3
notice: Rename directory for notice templates

By default, macOS uses a case-insensitive file system. Having a notice directory and the NOTICE file in the same directory makes it hard to work with this repository.

opened by MarcelBochtler 2
tools/curations: Make several Gradle tasks non-abstract

These tasks don't need to be abstract as they don't have any abstract functions. So, drop the abstract keyword in favor of open, as Gradle tasks are required to be non-final.

Part of #59.

opened by fviernau 2
Switch to a generated `license-classifications.yml` based on ScanCode's License DB

Add a Gradle task which generates license-classifications.yml from ScanCode's license data hosted at aboutcode.org and make use of the generated file.

Fixes #59.

Note: As a follow up, policy rules will need to be extended to handle new license categories. For now, the newly added categories will still be flagged by the evaluator rule UNHANDLED_LICENSE.

opened by fviernau 1
tools/curations: Make several Gradle tasks non-abstract

These tasks don't need to be abstract as they don't have any abstract functions. So, drop the abstract keyword in favor of open, as Gradle tasks are required to be non-final.

opened by fviernau 1
Gracefully handle Contributor License Agreements

See individual commits.

Context #66.

Note: I've proposed the corresponding extension of ScanCode's license data model here: https://github.com/nexB/scancode-toolkit/issues/3147.

opened by fviernau 0
evaluator-rules: Add handling for new categories in `license-classifications.yml`

The license-classifications.yml has been changed to contain ScanCode's license categorizations. For all new categories, the rules till report UNHANDLED license.

Update the rules so that these new categories are handled appropriately.

opened by fviernau 0

Curations and configuration files for the OSS Review Toolkit.

Related tags

Overview

ORT Config

Content

Curations

Tools

Usage

Contribute

License

Comments

license-classification: Drop the redundant 'strong-copyleft' category

notice: Rename directory for notice templates

tools/curations: Make several Gradle tasks non-abstract

Switch to a generated `license-classifications.yml` based on ScanCode's License DB

tools/curations: Make several Gradle tasks non-abstract

Gracefully handle Contributor License Agreements

evaluator-rules: Add handling for new categories in `license-classifications.yml`

Owner

OSS Review Toolkit

An experimental UI toolkit for generating PowerPoint presentation files using Compose

👋 A common toolkit (utils) ⚒️ built to help you further reduce Kotlin boilerplate code and improve development efficiency. Do you think 'kotlin-stdlib' or 'android-ktx' is not sweet enough? You need this! 🍭

Kotlin multiplatform benchmarking toolkit

🛠️ The missing drawable toolbox for Android. Create drawables programmatically and get rid of the boring and always repeated drawable.xml files.

Flutter plugin that leverages Storage Access Framework (SAF) API to get access and perform the operations on files and folders

Android project setup files when developing apps from scratch. The codebase uses lates jetpack libraries and MVVM repository architecture for setting up high performance apps

This server uses json files to model items, entities and more.

Kotlin and Java API for generating .swift source files.

This program will read from your android application string.xml file and generate translated strings.xml files in your preferred languages using google sheet.

Sync Kotlin files with an Xcode project

Project-applocker - A concept app that uses Jetpack Security to encrypt user data such as text files or images using Encrypted Shared Preferences

Open as default - A flutter plugin that allows setting up your flutter app to open files as default

SpyApp - The application launches dex files downloaded from the server

Uproot-JS - Extract JavaScript files from burp suite project with ease

Reapp is everything you need to build amazing apps with React: a collection of packages that work together, our UI kit, and a CLI that scaffolds your app and includes a server and build system.

Create an application with Kotlin/JVM and Kotlin/JS, and explore features around code sharing, serialization, server- and client

A tiny Kotlin multiplatform library that assists in saving and restoring objects to and from disk using kotlinx.coroutines, kotlinx.serialisation and okio

Create an application with Kotlin/JVM and Kotlin/JS, and explore features around code sharing, serialization, server- and client

Bego Chat is chat application in Kotlin and Firebase with the following features: last seen , user status like typing ,online and last seen with MVVM pattern and clean architecture