Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create automated list of project dependencies and their licenses #1449

Open
Ushcode opened this issue Jan 21, 2025 · 2 comments
Open

Create automated list of project dependencies and their licenses #1449

Ushcode opened this issue Jan 21, 2025 · 2 comments

Comments

@Ushcode
Copy link
Collaborator

Ushcode commented Jan 21, 2025

Coming from the CReDO design authority requirements, want to have a central location to keep track of project dependencies, i.e. stack components and package dependencies.

  • Trivial to list project licenses for 'viz' and write them to a file. Can do this periodically with a github action
  • Similarly easy to do so with pip for the python models
  • From a quick initial search, looks like there are third party solutions to do this for maven

stack dependencies are finite and won't be changing: blazegraph, ontop etc. I suggest writing these manually and keeping the above up to date via actions

@Ushcode
Copy link
Collaborator Author

Ushcode commented Jan 21, 2025

Alternatively, use a more comprehensive tool like dependency track

@gpeb2
Copy link
Collaborator

gpeb2 commented Jan 21, 2025

I've already implemented this using Maven for the MoDS GUI, it's easy enough once it's set up

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants