check_for_js_licenses.js 2.5 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162
  1. // Licensed to Cloudera, Inc. under one
  2. // or more contributor license agreements. See the NOTICE file
  3. // distributed with this work for additional information
  4. // regarding copyright ownership. Cloudera, Inc. licenses this file
  5. // to you under the Apache License, Version 2.0 (the
  6. // "License"); you may not use this file except in compliance
  7. // with the License. You may obtain a copy of the License at
  8. //
  9. // http://www.apache.org/licenses/LICENSE-2.0
  10. //
  11. // Unless required by applicable law or agreed to in writing, software
  12. // distributed under the License is distributed on an "AS IS" BASIS,
  13. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14. // See the License for the specific language governing permissions and
  15. // limitations under the License.
  16. const checker = require('license-checker');
  17. checker.init(
  18. {
  19. start: './'
  20. },
  21. (err, packages) => {
  22. if (err) {
  23. console.error(err);
  24. process.exitCode = 1;
  25. } else {
  26. let packageCount = 0;
  27. Object.keys(packages).forEach(packageName => {
  28. packageCount++;
  29. const licenses =
  30. typeof packages[packageName].licenses === 'string'
  31. ? packages[packageName].licenses
  32. : packages[packageName].licenses.join(', ');
  33. const lowerLicenses = licenses.toLowerCase();
  34. if (!licenses) {
  35. console.warn(`Unknown license for "${packageName}".`);
  36. } else if (
  37. lowerLicenses.indexOf('mit') === -1 &&
  38. lowerLicenses.indexOf('bsd') === -1 &&
  39. lowerLicenses.indexOf('apache') === -1 &&
  40. lowerLicenses.indexOf('isc') === -1 &&
  41. lowerLicenses.indexOf('unlicense') === -1 &&
  42. lowerLicenses.indexOf('cc') === -1 &&
  43. lowerLicenses.indexOf('python-2.0') === -1 &&
  44. lowerLicenses.indexOf('blueoak-1.0.0') === -1 &&
  45. // lz-string is marked as WTFPL license on NPM but the valid license is MIT from the github repo
  46. // https://github.com/pieroxy/lz-string/issues/147
  47. !packageName.startsWith('lz-string@') &&
  48. // cuix and cuix-core are from Cloudera, no need to check licence here.
  49. !packageName.startsWith('@cloudera/cuix-core@') &&
  50. !packageName.startsWith('cuix@')
  51. ) {
  52. console.warn(`Found invalid license in "${packageName}", license: "${licenses}".`);
  53. process.exitCode = 1;
  54. }
  55. });
  56. // eslint-disable-next-line no-restricted-syntax
  57. console.log(`Done! Scanned ${packageCount} packages.`);
  58. }
  59. }
  60. );