You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
depot_tools/metadata
Jordan Brown 9e4336f5fb Adding 0BSD and Python-2.0 to allowlist
These are both in use in chromium:
* xzutils [0] uses 0BSD and is available at https://spdx.org/licenses/0BSD
* argparse [1] uses Python-2.0 and can be found at https://spdx.org/licenses/Python-2.0

xz's provided license file needs to be updated to include the 0BSD
license, and argparse doesn't include a license file, but these are
separate issues.

[0]
https://crsrc.org/c/chrome/installer/mac/third_party/xz/README.chromium
[1]
https://source.chromium.org/chromium/chromium/src/+/main:third_party/js_code_coverage/README.chromium;l=56-72

Change-Id: Ib3671a496ac4819db80c844bd15e5f4bf0da9160
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/tools/depot_tools/+/6188506
Commit-Queue: Jordan Brown <rop@google.com>
Reviewed-by: Jordan Brown <rop@google.com>
Reviewed-by: Bill Wendling <morbo@google.com>
3 months ago
..
fields Adding 0BSD and Python-2.0 to allowlist 3 months ago
tests [dependency_metadata] Allow descriptions for CVEs 3 months ago
LICENSE_OWNERS Add clear documentation to license_allowlist.py 3 months ago
OWNERS Updating presubmit to check license is a valid spdx identifier. 5 months ago
PRESUBMIT.py [ssci] PEP8 formatting for metadata directory 2 years ago
README.md [ssci] Script to run validation on all metadata files 2 years ago
SECURITY_TEAM_OWNERS Updating presubmit to check license is a valid spdx identifier. 5 months ago
__init__.py Define main metadata validation functions 2 years ago
dependency_metadata.py [dependency_metadata] Allow descriptions for CVEs 3 months ago
discover.py metadata: sort discovered files and validation messages 1 year ago
parse.py [dependency_metadata] Allow descriptions for CVEs 3 months ago
scan.py metadata: sort result summary 1 year ago
validate.py Add `is_open_source_project` to metadata validation 4 months ago
validation_result.py metadata: add line number reporting 9 months ago

README.md

Validation for Chromium's Third Party Metadata Files

This directory contains the code to validate Chromium third party metadata files, i.e. README.chromium files.

Prerequisites

  1. Have the Chromium source code checked out on disk
  2. Ensure you've run gclient runhooks on your source checkout

Run

metadata/scan.py can be used to search for and validate all Chromium third party metadata files within a repository. For example, if your chromium/src checkout is at ~/my/path/to/chromium/src, run the following command from the root directory of depot_tools:

vpython3 --vpython-spec=.vpython3 metadata/scan.py ~/my/path/to/chromium/src