IP Due Diligence

[waynebeaton]

It looks like your GitHub Action that runs the Eclipse Dash License Tool isn't configure correctly.

https://github.com/eclipse-score/orchestrator/actions/runs/19358547806/job/55384774672#step:4:97

I can't identify the problem.

When I run the tool locally, it identifies one library that needs to be vetted.

$ cargo tree -e normal --prefix none --no-dedupe | sort -u | grep -v '^[[:space:]]*$' \
| grep -Pv ^iceoryx \
| grep -v "/gitroot/temp/orchestrator" \
| sed -E 's|([^ ]+) v([^ ]+).*|crate/cratesio/-/\1/\2|' \
| java -jar /gitroot/dash-licenses/shaded/target/org.eclipse.dash.licenses-1.1.1-SNAPSHOT.jar - 
[main] INFO Querying Eclipse Foundation for license data for 55 items.
[main] INFO Found 32 items.
[main] INFO Querying ClearlyDefined for license data for 23 items.
[main] INFO Found 23 items.
[main] INFO License information could not be automatically verified for the following content:
[main] INFO 
[main] INFO crate/cratesio/-/tiny-fn/0.1.9
[main] INFO 
[main] INFO This content is either not correctly mapped by the system, or requires review.

Please submit the outstanding third-party content for review.

[pawelrutkaq]

@nicu1989

[vinodreddy-g]

@waynebeaton , we are having a direct dependency to https://github.com/eclipse-iceoryx/iceoryx2 , and it has dependency to crate/cratesio/-/tiny-fn/0.1.9 looks like and it is a crate in https://crates.io/crates/tiny-fn/0.1.8 (has info of license and github repo). If this was info needed.

[FScholPer]

@vinodreddy-g any update here?

[waynebeaton]

AFAICT, Ecilpse iceoryx is resolving tiny-fn version 0.1.7, but your build is resolving a later, but hopefully compatible, version 0.1.9.

Please use the Automatic IP Team Review Requests feature to create a review request.