Add a pipeline check that fails on dependencies licensing issues usin…

…g ORT (#171)

.github/workflows/ort.yml

@@ -0,0 +1,40 @@
+name: ORT licensing
+
+on:
+  push:
+    branches:
+    - master
+    - '[0-9]+.[0-9]+.x'
+    tags:
+    - '**'
+  pull_request:
+    branches:
+    - master
+    - '[0-9]+.[0-9]+.x'
+
+jobs:
+  ort:
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-java@v1
+        with:
+          java-version: '11.0.1'
+
+      - name: Analyze licensing
+        id: ort-action
+        uses: edulix/ort-action@develop
+        with:
+          fail-on: hints
+          package-curations-dir: .ort-data/curations-dir/
+          rules-file: .ort-data/rules.kts
+          license-classifications-file: .ort-data/license-classifications.yml
+          reporters: AdocTemplate,PdfTemplate,Excel,StaticHtml,WebApp
+          report-extra-args: >
+            --report-option
+            ADocTemplate=template.path=/project/.ort-data/disclosure_document.ftl
+
+      - uses: actions/upload-artifact@v2
+        with:
+          name: licenses
+          path: ${{ steps.ort-action.outputs.results-dir }}

.ort-data/curations-dir/agora-gui-booth.yml

@@ -0,0 +1,7 @@
+- id: "Yarn::agora-gui-booth"
+  curations:
+    comment: "This package needs to be downloaded from git"
+    vcs:
+      type: "git"
+      url: "https://github.com/Bernardo-Castilho/dragdroptouch.git"
+      revision: "058f0eca96e57ad695f0d5dd2d7bd492ef1c4e47"

.ort-data/curations-dir/bsd_license.yml

@@ -0,0 +1,228 @@
+---
+- id: "PyPI::babel"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::ipdb"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::enum34"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::flask"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::flask-sqlalchemy"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::itsdangerous"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::jinja2"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::prettytable"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::werkzeug"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::amqp"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::anyjson"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::backcall"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::beaker"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::billiard"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::celery"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::click"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::click-didyoumean"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::click-plugins"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::cryptography"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::decorator"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::django"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::django-celery-results"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::django-nose"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::idna"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::ipython"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::ipython-genutils"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::kombu"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::markupsafe"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::nodeenv"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::prompt-toolkit"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::pycparser"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::pygments"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::python-dateutil"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::reportlab"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::sqlparse"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::traitlets"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "PyPI::vine"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+
+- id: "Maven:org.webbitserver:webbit"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"

.ort-data/curations-dir/distlib.yml

@@ -0,0 +1,6 @@
+- id: "PyPI::distlib"
+  curations:
+    comment: "Invalid license with a space."
+    declared_license_mapping:
+      "BSD License": "BSD-3-Clause"
+      "Python license": "PSF-2.0"

.ort-data/curations-dir/drangandroptouch.yml

@@ -0,0 +1,7 @@
+- id: "dragandroptouch"
+  curations:
+    comment: "This package needs to be downloaded from git"
+    vcs:
+      type: "git"
+      url: "https://github.com/Bernardo-Castilho/dragdroptouch.git"
+      revision: "058f0eca96e57ad695f0d5dd2d7bd492ef1c4e47"

.ort-data/curations-dir/fractionjs.yml

@@ -0,0 +1,4 @@
+- id: "NPM::fraction.js"
+  curations:
+    comment: "The package is detected as GPL because it's double licensed with GPL and MIT, so we use the MIT"
+    concluded_license: "MIT"

.ort-data/curations-dir/java.yml

@@ -0,0 +1,17 @@
+- id: "Maven:javax.cache:cache-api"
+  curations:
+    comment: "Incorrectly matched license, see https://search.maven.org/artifact/javax.cache/cache-api"
+    declared_license_mapping:
+      "JSR-000107 JCACHE 2.9 Public Review - Updated Specification\n                License": "Apache-2.0"
+
+- id: "Maven:org.json:json"
+  curations:
+    comment: "It's basically MIT with a do not do evil clause."
+    declared_license_mapping:
+      "provided without support or warranty": "MIT"
+
+- id: "Maven:com.h2database:h2"
+  curations:
+    comment: "H2 is dual licensed and available under the MPL 2.0 (Mozilla Public License Version 2.0) or under the EPL 1.0 (Eclipse Public License). http://h2database.com/html/license.html"
+    declared_license_mapping:
+      "The H2 License, Version 1.0": "EPL-1.0"

.ort-data/curations-dir/jszip.yml

@@ -0,0 +1,4 @@
+- id: "NPM::jszip"
+  curations:
+    comment: "The package is detected as GPL-3.0-only because it's double licensed with GPL-3.0-only and MIT, so we use the MIT"
+    concluded_license: "MIT"

.ort-data/curations-dir/psycopg2-binary.yml

@@ -0,0 +1,5 @@
+- id: "PyPI::psycopg2-binary"
+  curations:
+    comment: "Incorrectly matched license."
+    declared_license_mapping:
+      "LGPL with exceptions": "LGPL-2.0-only"

.ort-data/curations-dir/pycryptodomex.yml

@@ -0,0 +1,6 @@
+- id: "PyPI::pycryptodomex"
+  curations:
+    comment: "Incorrectly matched license."
+    declared_license_mapping:
+      "BSD, Public Domain": "BSD-3-Clause"
+      "BSD License": "BSD-3-Clause"

.ort-data/curations-dir/reportlab.yml

@@ -0,0 +1,6 @@
+- id: "PyPI::reportlab"
+  curations:
+    comment: "Incorrectly matched license."
+    declared_license_mapping:
+      "BSD license (see license.txt for details), Copyright (c) 2000-2018, ReportLab Inc.": "BSD-3-Clause"
+      "BSD license (see license.txt for details), Copyright (c) 2000-2015, ReportLab Inc.": "BSD-3-Clause"

.ort-data/curations-dir/rng-js.yml

@@ -0,0 +1,5 @@
+- id: "NPM::rng-js"
+  curations:
+    comment: "Declared license is misspelled with a 'c' - UK vs. US English."
+    declared_license_mapping:
+      Unlicence: "Unlicense"