This repository contains configuration files for the OSS Review Toolkit.
The curations directory contains package curations for open source packages.
Package curations submitted to this repository must adhere to the following rules:
- Declaring authors and concluded licenses is currently not allowed.
- Declared license mappings must map licenses to valid SPDX expressions. The curation comment must provide proof that the mapping is correct.
- Curations that apply to whole namespaces by only setting the type and namespace of the identifier are not allowed.
- The curation file path must be
curations/[type]/[namespace]/[name].yml
. If the namespace is empty, use "_". For example a curation for the packageNuGet::Azure.Core:1.2.0
must be in the filecuration/NuGet/_/Azure.Core.yml
.
Package configurations containing license finding curations or path excludes are not yet supported.
The tools directory contains tools that help generating curations.
To use the configuration provided by this repository, it needs to be cloned, and the files need to be passed to the respective options of the ORT CLI commands. For example, to use the curations with the ORT analyzer:
ort analyze --package-curations-dir [path-to-curations-dir]
Using this repository together with ORT will be simplified in future.
This repository is currently in incubation and not yet ready for contributions.
Copyright (C) 2019-2023 The ORT Project Authors.
See the LICENSE file in the root of this project for license details.
OSS Review Toolkit (ORT) is a Linux Foundation project and part of ACT.