#1525 Node.js: Check that License field is synced with bundled licenses
Opened by mavit. Modified
Unknown source master

Download 1525.patch

It would be easy to overlook a change/addition to the bundled licences, so suggest an automated check that they’re still as specified in the .spec.

Just jq please.

IMO this should be made into a macro in nodejs-packaging, and the dependency added there.

Note that the current implementation is also a bit simplistic, and will break as soon as one of the components is dual-licensed (among other things).

join(" AND ") only works for simple cases like "MIT" or "BSD-3-Clause" but it is not uncommon for projects to be dual-licensed these days (like MIT OR Apache-2.0), and the simple "concatenate with " AND "" will result in broken SPDX expressions, and cannot match the License tag of the package (or rather, it shouldn't - because if it did, then the package's License tag would be wrong, too).

Metadata