Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow generating license information in .app #1001

Open
paulo-ferraz-oliveira opened this issue May 21, 2024 · 1 comment
Open

Allow generating license information in .app #1001

paulo-ferraz-oliveira opened this issue May 21, 2024 · 1 comment

Comments

@paulo-ferraz-oliveira
Copy link

paulo-ferraz-oliveira commented May 21, 2024

As per what was discussed in ninenines/cowboy#1651, this issue's goal is to be a reference for future discussion around implementing an erlang.mk "system" that allows populating .app with license information that can be used both by Hex.pm and rebar3_sbom, for example.

Example expectation

It could look something like

# erlang.mk
LICENSE = ISC

after which e.g. target ebin/$(PROJECT).app could generate output such as

{licenses, ["ISC"]}

Further considerations

The license information could be detected from an existing LICENSE file (as proposed by @essen in the linked issue) and extracted using licensee and jq. It should also be possible to cache this information (and read from the cache, when available) so as to not call the same "system" over and over at compile time.

@paulo-ferraz-oliveira
Copy link
Author

In the meantime, https://github.com/voltone/rebar3_sbom v0.8.0 came out, so we can already fetch info. from hex_metadata.config files, which e.g. Hex-based cowboy packs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant