Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
License discovery for Maven packages
-
I have set up a feed with a connector to maven central and pulled various packages into the feed. Unfortunately none of them have automatically picked up the license and they all show "Not Detected". Does this mean I have to go through all the packages manually and configure them?
-
Hi @matt-wood_5559,
A Maven package's license is determined by the
licensefield in the POM:
https://maven.apache.org/pom.html#LicensesThere are unfortunately no real standards here, and the author can put in anything from a SPDX Code (which is recommended, by the way) to a string like "Apache license" (which probably means apache 2.0, but who knows?).
We would rather not guess what the author might have intended, so ProGet only detects licenses with SPDX codes and then lets you decide how assign which codes to other license types as you come across packages that don't follow SPDX.
However, once you start associating those strings with licenses, it will work for future packages.
Thanks,
Alana
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login