[GitHub] [incubator-zipkin] abesto commented on issue #2548: Sort out DEPENDENCIES file for zipkin-lens

[GitBox <gi...@apache.org>]

abesto commented on issue #2548: Sort out DEPENDENCIES file for zipkin-lens
URL: https://github.com/apache/incubator-zipkin/issues/2548#issuecomment-497936974
 
 
   Good news: there's an NPM package for everything. Bad news: there are at least three NPM packages for everything. It seems to me that https://www.npmjs.com/package/license-checker is our best bet. Output for `npm install && npm install --only=dev && npm install -g license-checker && license-checker` in `zipkin-lens`: https://gist.github.com/abesto/dc9fe2e27a0ebe6409b5653d67bf8a99
   
   Does that look good enough to just dump into the `DEPENDENCIES` file during the build process? Do we need any more organization? I'd argue it's long enough to be useless, but maybe it's exactly what we need?
   
   Note also that with `--onlyAllow` this tool can also be used to verify we're using only allowed licenses (we'll need to populate the list ourselves, there isn't an ASF preset, but I remember seeing a comprehensive list of licenses the ASF likes, so that shouldn't be a huge issue).
   
   Using `--summary`, here's the list of licenses used in our dependencies: https://gist.github.com/abesto/e2c0a52445c0e5f06169bfe0faefb299
   
   ```
   ├─ MIT: 1067
   ├─ ISC: 95
   ├─ BSD-3-Clause: 33
   ├─ Apache-2.0: 26
   ├─ BSD-2-Clause: 24
   ├─ MIT*: 8
   ├─ BSD*: 7
   ├─ BSD: 2
   ├─ CC-BY-4.0: 2
   ├─ CC0-1.0: 2
   ├─ (BSD-3-Clause OR GPL-2.0): 1
   ├─ (MIT OR Apache-2.0): 1
   ├─ Apache*: 1
   ├─ AFLv2.1,BSD: 1
   ├─ WTFPL: 1
   ├─ MPL-2.0: 1
   ├─ (CC-BY-4.0 AND OFL-1.1 AND MIT): 1
   ├─ (MIT AND Zlib): 1
   ├─ (WTFPL OR MIT): 1
   ├─ BSD-3-Clause OR MIT: 1
   ├─ (MIT AND BSD-3-Clause): 1
   ├─ CC-BY-3.0: 1
   └─ Unlicense: 1
   ```

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services