Working on a license scanner for git-pkgs, uses the scancode license rule corpus but much, much faster and less resource intensive: https://github.com/git-pkgs/licenses
My plan is to eventually use it to scan every version of every package with it soon.
GitHubGitHub - git-pkgs/licenses: Fast exact license matching against ScanCode's rule corpus in pure Go.Fast exact license matching against ScanCode's rule corpus in pure Go. - git-pkgs/licenses
Replying to @andrewnez@mastodon.social
@andrewnez would be happy to have this as a ci job in this era of changing licenses overnight
Much needed if you could get this under 3 mins that would be a huge win
Replying to @bupd@mastodon.social
@bupd related issue you might want to track: https://github.com/git-pkgs/git-pkgs/issues/294
GitHublicenses: option to emit full license text per dependency (--license-text) · Issue #294 · git-pkgs/git-pkgsUse case We generate attribution artifacts for a few hundred internal repos (Go, Ruby, npm, Python). For every resolved dependency we need the SPDX identifier and the verbatim license text (plus NO...