Package: devscripts
Version: 2.10.64
Severity: wishlist
Tags: patch
Hello,
I attach a new version of licensecheck with a --machine option that outputs
a machine readable version, so that one can sort and/or filter the files
based on license and copyright.
This option is important because I think that most software have a leading
license and copyright owner, but possibly has "hidden in the corners" some
other licenses and copyright owners on which a packager needs to be able
to concentrate.
An example, in order to package Knopflerfish, I would now be able to use
a command like:
licensecheck -r --copyright --machine . | sort -k2,3 -t' ' | \
awk -F' ' '($2 ~ "^BSD .3" && $3 ~ "KNOPFLERFISH") || ($2 ~ "Apache
.v2" && $3 ~ "OSGi") {next} {print}'
(the spaces after the -t and -F options represent obviously tabs)
in order to filter out all obvious license / copyright owner combinations
and concentrate on the remaining ones.
I think my patch would also allow to close the Bug #552192, but I leave
it to you to decide.
Thanks, Eric
-- Package-specific info:
--- /etc/devscripts.conf ---
--- ~/.devscripts ---
Not present
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-trunk-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash
Versions of packages devscripts depends on:
ii dpkg-dev 1.15.7.2 Debian package development tools
ii libc6 2.10.2-9 Embedded GNU C Library: Shared lib
ii perl 5.10.1-12 Larry Wall's Practical Extraction
Versions of packages devscripts recommends:
pn at <none> (no description available)
ii bsd-mailx [mailx] 8.1.2-0.20100314cvs-1 simple mail user agent
ii bzr 2.1.2-1 easy to use distributed version co
ii cvs 1:1.12.13-12 Concurrent Versions System
ii dctrl-tools 2.14 Command-line tools to process Debi
ii debian-keyring [d 2010.03.31 GnuPG (and obsolete PGP) keys of D
ii dillo [www-browse 0.8.6-3 Small and fast web browser
ii dput 0.9.6 Debian package upload tool
ii equivs 2.0.8 Circumvent Debian package dependen
ii fakeroot 1.14.4-1 Gives a fake root environment
ii git [git-core] 1:1.7.1-1 fast, scalable, distributed revisi
ii gnupg 1.4.10-4 GNU privacy guard - a free PGP rep
ii libauthen-sasl-pe 2.14-1 Authen::SASL - SASL Authentication
ii libcrypt-ssleay-p 0.57-2 Support for https protocol in LWP
ii libjson-perl 2.21-1 Perl module to parse and convert t
ii libparse-debcontr 2.005-2 Easy OO parsing of Debian control-
ii libsoap-lite-perl 0.711-1 Perl implementation of a SOAP clie
ii libterm-size-perl 0.2-4+b1 Perl extension for retrieving term
ii libtimedate-perl 1.2000-1 collection of modules to manipulat
ii liburi-perl 1.54-1 module to manipulate and access UR
ii libwww-perl 5.836-1 Perl HTTP/WWW client/server librar
ii libyaml-syck-perl 1.08-1 Perl module providing a fast, ligh
ii lintian 2.4.1 Debian package checker
ii lsb-release 3.2-23.1 Linux Standard Base version report
ii lzma 4.43-14 Compression method of 7z format in
ii man-db 2.5.7-3 on-line manual pager
ii openssh-client [s 1:5.5p1-4 secure shell (SSH) client, for sec
ii patch 2.6-2 Apply a diff file to an original
ii patchutils 0.3.1-2 Utilities to work with patches
ii sensible-utils 0.0.4 Utilities for sensible alternative
ii strace 4.5.20-2 A system call tracer
ii subversion 1.6.11dfsg-1 Advanced version control system
ii unzip 6.0-4 De-archiver for .zip files
ii wdiff 0.6.1-2 Compares two files word by word
ii wget 1.12-2 retrieves files from the web
ii xz-utils 4.999.9beta+20100527-1 XZ-format compression utilities
Versions of packages devscripts suggests:
ii build-essential 11.5 Informational list of build-essent
pn cvs-buildpackage <none> (no description available)
pn devscripts-el <none> (no description available)
pn gnuplot <none> (no description available)
pn libfile-desktopentry-perl <none> (no description available)
pn libnet-smtp-ssl-perl <none> (no description available)
pn mutt <none> (no description available)
ii svn-buildpackage 0.8.0 helper programs to maintain Debian
pn w3m <none> (no description available)
-- no debconf information
#!/usr/bin/perl -w
# This script was originally based on the script of the same name from
# the KDE SDK (by dfa...@kde.org)
#
# This version is
# Copyright (C) 2007, 2008 Adam D. Barratt
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
=head1 NAME
licensecheck - simple license checker for source files
=head1 SYNOPSIS
B<licensecheck> B<--help|--version>
B<licensecheck> [B<--no-conf>] [B<--verbose>] [B<--copyright>] [B<--machine>]
[B<-l|--lines=N>] [B<-i|--ignore=regex>] [B<-c|--check=regex>]
[B<-r|--recursive>] I<list of files and directories to check>
=head1 DESCRIPTION
B<licensecheck> attempts to determine the license that applies to each file
passed to it, by searching the start of the file for text belonging to
various licenses.
If any of the arguments passed are directories, B<licensecheck> will add
the files contained within to the list of files to process.
=head1 OPTIONS
=over 4
=item B<--verbose> B<--no-verbose>
Specify whether to output the text being processed from each file before
the corresponding license information.
Default is to be quiet.
=item B<-l=N> B<--lines=N>
Specify the number of lines of each file's header which should be parsed
for license information. (Default is 60).
=item B<-i=regex> B<--ignore=regex>
When processing the list of files and directories, the regular
expression specified by this option will be used to indicate those which
should not be considered (e.g. backup files, VCS metadata).
=item B<-r> B<--recursive>
Specify that the contents of directories should be added
recursively.
=item B<-c=regex> B<--check=regex>
Specify a pattern against which filenames will be matched in order to
decide which files to check the license of.
The default includes common source files.
=item B<--copyright>
Also display copyright text found within the file
=item B<--machine>
Displays the information in a machine readable way, i.e. in the form
<file><tab><license>[<tab><copyright>] so that it can be easily sorted
and/or filtered, e.g. with the F<awk> and F<sort> commands.
Note that using the B<--verbose> option will kill the readibility.
=item B<--no-conf> B<--noconf>
Do not read any configuration files. This can only be used as the first
option given on the command-line.
=back
=head1 CONFIGURATION VARIABLES
The two configuration files F</etc/devscripts.conf> and
F<~/.devscripts> are sourced by a shell in that order to set
configuration variables. Command line options can be used to override
configuration file settings. Environment variable settings are
ignored for this purpose. The currently recognised variables are:
=over 4
=item B<LICENSECHECK_VERBOSE>
If this is set to I<yes>, then it is the same as the --verbose command
line parameter being used. The default is I<no>.
=item B<LICENSECHECK_PARSELINES>
If this is set to a positive number then the specified number of lines
at the start of each file will be read whilst attempting to determine
the license(s) in use. This is equivalent to the --lines command line
option.
=back
=head1 LICENSE
This code is copyright by Adam D. Barratt <a...@adam-barratt.org.uk>,
all rights reserved; based on a script of the same name from the KDE
SDK, which is copyright by <dfa...@kde.org>.
This program comes with ABSOLUTELY NO WARRANTY.
You are free to redistribute this code under the terms of the GNU
General Public License, version 2 or later.
=head1 AUTHOR
Adam D. Barratt <a...@adam-barratt.org.uk>
=cut
use strict;
use warnings;
use Getopt::Long;
use File::Basename;
sub fatal($);
sub parse_copyright($);
sub parselicense($);
my $progname = basename($0);
# From dpkg-source
my $default_ignore_regex = '
# Ignore general backup files
(?:^|/).*~$|
# Ignore emacs recovery files
(?:^|/)\.#.*$|
# Ignore vi swap files
(?:^|/)\..*\.swp$|
# Ignore baz-style junk files or directories
(?:^|/),,.*(?:$|/.*$)|
# File-names that should be ignored (never directories)
(?:^|/)(?:DEADJOE|\.cvsignore|\.arch-inventory|\.bzrignore|\.gitignore)$|
# File or directory names that should be ignored
(?:^|/)(?:CVS|RCS|\.deps|\{arch\}|\.arch-ids|\.svn|\.hg|_darcs|\.git|
\.shelf|_MTN|\.bzr(?:\.backup|tags)?)(?:$|/.*$)
';
# Take out comments and newlines
$default_ignore_regex =~ s/^#.*$//mg;
$default_ignore_regex =~ s/\n//sg;
my $default_check_regex = '\.(c(c|pp|xx)?|h(h|pp|xx)?|f(77|90)?|p(l|m)|xs|sh|php|py|rb|java|vala|el|sc(i|e)|cs)$';
my $modified_conf_msg;
my ($opt_verbose, $opt_lines, $opt_noconf, $opt_ignore_regex, $opt_check_regex)
= ('', '', '', '', '');
my $opt_recursive = 0;
my $opt_copyright = 0;
my $opt_machine = 0;
my ($opt_help, $opt_version);
my $def_lines = 60;
# Read configuration files and then command line
# This is boilerplate
if (@ARGV and $ARGV[0] =~ /^--no-?conf$/) {
$modified_conf_msg = " (no configuration files read)";
shift;
} else {
my @config_files = ('/etc/devscripts.conf', '~/.devscripts');
my %config_vars = (
'LICENSECHECK_VERBOSE' => 'no',
'LICENSECHECK_PARSELINES' => $def_lines,
);
my %config_default = %config_vars;
my $shell_cmd;
# Set defaults
foreach my $var (keys %config_vars) {
$shell_cmd .= qq[$var="$config_vars{$var}";\n];
}
$shell_cmd .= 'for file in ' . join(" ", @config_files) . "; do\n";
$shell_cmd .= '[ -f $file ] && . $file; done;' . "\n";
# Read back values
foreach my $var (keys %config_vars) { $shell_cmd .= "echo \$$var;\n" }
my $shell_out = `/bin/bash -c '$shell_cmd'`;
@config_vars{keys %config_vars} = split /\n/, $shell_out, -1;
# Check validity
$config_vars{'LICENSECHECK_VERBOSE'} =~ /^(yes|no)$/
or $config_vars{'LICENSECHECK_VERBOSE'} = 'no';
$config_vars{'LICENSECHECK_PARSELINES'} =~ /^[1-9][0-9]*$/
or $config_vars{'LICENSECHECK_PARSELINES'} = $def_lines;
foreach my $var (sort keys %config_vars) {
if ($config_vars{$var} ne $config_default{$var}) {
$modified_conf_msg .= " $var=$config_vars{$var}\n";
}
}
$modified_conf_msg ||= " (none)\n";
chomp $modified_conf_msg;
$opt_verbose = $config_vars{'LICENSECHECK_VERBOSE'} eq 'yes' ? 1 : 0;
$opt_lines = $config_vars{'LICENSECHECK_PARSELINES'};
}
GetOptions("help|h" => \$opt_help,
"version|v" => \$opt_version,
"verbose!" => \$opt_verbose,
"lines|l=i" => \$opt_lines,
"ignore|i=s" => \$opt_ignore_regex,
"recursive|r" => \$opt_recursive,
"check|c=s" => \$opt_check_regex,
"copyright" => \$opt_copyright,
"machine" => \$opt_machine,
"noconf" => \$opt_noconf,
"no-conf" => \$opt_noconf,
)
or die "Usage: $progname [options] filelist\nRun $progname --help for more details\n";
$opt_lines = $def_lines if $opt_lines !~ /^[1-9][0-9]*$/;
$opt_ignore_regex = $default_ignore_regex if ! length $opt_ignore_regex;
$opt_check_regex = $default_check_regex if ! length $opt_check_regex;
if ($opt_noconf) {
fatal "--no-conf is only acceptable as the first command-line option!";
}
if ($opt_help) { help(); exit 0; }
if ($opt_version) { version(); exit 0; }
die "Usage: $progname [options] filelist\nRun $progname --help for more details\n" unless @ARGV;
$opt_lines = $def_lines if not defined $opt_lines;
my @files = ();
my @find_args = ();
my $files_count = @ARGV;
push @find_args, qw(-maxdepth 1) unless $opt_recursive;
push @find_args, qw(-follow -type f -print);
while (@ARGV) {
my $file = shift @ARGV;
if (-d $file) {
open FIND, '-|', 'find', $file, @find_args
or die "$progname: couldn't exec find: $!\n";
while (<FIND>) {
chomp;
next unless m%$opt_check_regex%;
# Skip empty files
next if (-z $_);
push @files, $_ unless m%$opt_ignore_regex%;
}
close FIND;
} else {
next unless ($files_count == 1) or $file =~ m%$opt_check_regex%;
push @files, $file unless $file =~ m%$opt_ignore_regex%;
}
}
while (@files) {
my $file = shift @files;
my $content = '';
my $copyright_match;
my $copyright = '';
my $license = '';
my %copyrights;
open (F, "<$file") or die "Unable to access $file\n";
while (<F>) {
last if ($. > $opt_lines);
$content .= $_;
$copyright_match = parse_copyright($_);
if ($copyright_match) {
$copyrights{lc("$copyright_match")} = "$copyright_match";
}
}
close(F);
$copyright = join(" / ", values %copyrights);
print qq(----- $file header -----\n$content----- end header -----\n\n)
if $opt_verbose;
$content =~ tr/\t\r\n/ /;
# Remove C / C++ comments
$content =~ s#(\*/|/[/*])##g;
$content =~ tr% A-Za-z.,@;0-9\(\)/-%%cd;
$content =~ s/ c //g; # Remove fortran comments
$content =~ tr/ //s;
$license = parselicense($content);
if ($opt_machine) {
print "$file\t$license";
print "\t" . ($copyright or "*No copyright*")
if $opt_copyright;
print "\n";
} else {
print "$file: ";
print "*No copyright* " unless $copyright;
print $license . "\n";
print " [Copyright: " . $copyright . "]\n"
if $copyright and $opt_copyright;
print "\n" if $opt_copyright;
}
}
sub parse_copyright($) {
my $copyright = '';
my $match;
my $copyright_indicator_regex = '
(?:copyright # The full word
|copr\. # Legally-valid abbreviation
|\x{00a9} # Unicode character COPYRIGHT SIGN
|\xc2\xa9 # Unicode copyright sign encoded in iso8859
|\(c\) # Legally-null representation of sign
)';
my $copyright_disindicator_regex = '
\b(?:info(?:rmation)? # Discussing copyright information
|notice # Discussing the notice
|and|or # Part of a sentence
)\b';
if (m%$copyright_indicator_regex(?::\s*|\s+)(\S.*)$%ix) {
$match = $1;
# Ignore lines matching "see foo for copyright information" etc.
if ($match !~ m%^\s*$copyright_disindicator_regex%ix) {
# De-cruft
$match =~ s/([,.])?\s*$//;
$match =~ s/$copyright_indicator_regex//igx;
$match =~ s/^\s+//;
$match =~ s/\s{2,}/ /g;
$match =~ s/\\@/@/g;
$copyright = $match;
}
}
return $copyright;
}
sub help {
print <<"EOF";
Usage: $progname [options] filename [filename ...]
Valid options are:
--help, -h Display this message
--version, -v Display version and copyright info
--no-conf, --noconf Don't read devscripts config files; must be
the first option given
--verbose Display the header of each file before its
license information
--lines, -l Specify how many lines of the file header
should be parsed for license information
(Default: $def_lines)
--check, -c Specify a pattern indicating which files should
be checked
(Default: '$default_check_regex')
--recursive, -r Add the contents of directories recursively
--copyright Also display the file's copyright
--ignore, -i Specify that files / directories matching the
regular expression should be ignored when
checking files
(Default: '$default_ignore_regex')
Default settings modified by devscripts configuration files:
$modified_conf_msg
EOF
}
sub version {
print <<"EOF";
This is $progname, from the Debian devscripts package, version 2.10.64
Copyright (C) 2007, 2008 by Adam D. Barratt <ad...@adam-barratt.org.uk>; based
on a script of the same name from the KDE SDK by <dfau...@kde.org>.
This program comes with ABSOLUTELY NO WARRANTY.
You are free to redistribute this code under the terms of the
GNU General Public License, version 2, or (at your option) any
later version.
EOF
}
sub parselicense($) {
my ($licensetext) = @_;
my $gplver = "";
my $extrainfo = "";
my $license = "";
if ($licensetext =~ /version ([^ ]+) (?:\(?only\)?.? )?(?:of the GNU (Affero )?General Public License )?as published by the Free Software Foundation/i or
$licensetext =~ /GNU (?:Affero )?General Public License as published by the Free Software Foundation; version ([^ ]+) /i) {
$gplver = " (v$1)";
} elsif ($licensetext =~ /GNU (Affero ?)General Public License, version ([^ ]+?)[ .]/) {
$gplver = " (v$1)";
} elsif ($licensetext =~ /either version ([^ ]+) of the License, or \(at your option\) any later version/) {
$gplver = " (v$1 or later)";
}
if ($licensetext =~ /(?:675 Mass Ave|59 Temple Place|51 Franklin Steet|02139|02111-1307)/i) {
$extrainfo = " (with incorrect FSF address)$extrainfo";
}
if ($licensetext =~ /permission (?:is (also granted|given))? to link (the code of )?this program with (any edition of )?(Qt|the Qt library)/i) {
$extrainfo = " (with Qt exception)$extrainfo"
}
if ($licensetext =~ /(All changes made in this file will be lost|DO NOT (EDIT|delete this file)|Generated by)/i) {
$license = "GENERATED FILE";
}
if ($licensetext =~ /is free software.? you can redistribute it and\/or modify it under the terms of the (GNU (Library|Lesser) General Public License|LGPL)/i) {
$license = "LGPL$gplver$extrainfo $license";
}
if ($licensetext =~ /is free software.? you can redistribute it and\/or modify it under the terms of the (GNU Affero General Public License|AGPL)/i) {
$license = "AGPL$gplver$extrainfo $license";
}
if ($licensetext =~ /is free software.? you (can|may) redistribute it and\/or modify it under the terms of (?:version [^ ]+ (?:\(?only\)? )?of )?the GNU General Public License/i) {
$license = "GPL$gplver$extrainfo $license";
}
if ($licensetext =~ /is distributed under the terms of the GNU General Public License,/
and length $gplver) {
$license = "GPL$gplver$extrainfo $license";
}
if ($licensetext =~ /is distributed.*terms.*GPL/) {
$license = "GPL (unversioned/unknown version) $license";
}
if ($licensetext =~ /This file is part of the .*Qt GUI Toolkit. This file may be distributed under the terms of the Q Public License as defined/) {
$license = "QPL (part of Qt) $license";
} elsif ($licensetext =~ /may be distributed under the terms of the Q Public License as defined/) {
$license = "QPL $license";
}
if ($licensetext =~ /http:\/\/opensource\.org\/licenses\/mit-license\.php/) {
$license = "MIT/X11 (BSD like) $license";
} elsif ($licensetext =~ /Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files \(the Software\), to deal in the Software/) {
$license = "MIT/X11 (BSD like) $license";
}
if ($licensetext =~ /Permission to use, copy, modify, and(\/or)? distribute this software for any purpose with or without fee is hereby granted, provided.*copyright notice.*permission notice.*all copies/) {
$license = "ISC $license";
}
if ($licensetext =~ /THIS SOFTWARE IS PROVIDED .*AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY/) {
if ($licensetext =~ /All advertising materials mentioning features or use of this software must display the following acknowledge?ment.*This product includes software developed by/i) {
$license = "BSD (4 clause) $license";
} elsif ($licensetext =~ /(The name of .*? may not|Neither the names? of .*? nor the names of (its|their) contributors may) be used to endorse or promote products derived from this software/i) {
$license = "BSD (3 clause) $license";
} elsif ($licensetext =~ /Redistributions of source code must retain the above copyright notice/i) {
$license = "BSD (2 clause) $license";
} else {
$license = "BSD $license";
}
}
if ($licensetext =~ /Mozilla Public License Version ([^ ]+)/) {
$license = "MPL (v$1) $license";
}
if ($licensetext =~ /Released under the terms of the Artistic License ([^ ]+)/) {
$license = "Artistic (v$1) $license";
}
if ($licensetext =~ /is free software under the Artistic [Ll]icense/) {
$license = "Artistic $license";
}
if ($licensetext =~ /This program is free software; you can redistribute it and\/or modify it under the same terms as Perl itself/) {
$license = "Perl $license";
}
if ($licensetext =~ /under the Apache License, Version ([^ ]+) \(the License\)/) {
$license = "Apache (v$1) $license";
}
if ($licensetext =~ /This source file is subject to version ([^ ]+) of the PHP license/) {
$license = "PHP (v$1) $license";
}
if ($licensetext =~ /under the terms of the CeCILL /) {
$license = "CeCILL $license";
}
if ($licensetext =~ /under the terms of the CeCILL-([^ ]+) /) {
$license = "CeCILL-$1 $license";
}
if ($licensetext =~ /under the SGI Free Software License B/) {
$license = "SGI Free Software License B $license";
}
if ($licensetext =~ /is in the public domain/i) {
$license = "Public domain";
}
if ($licensetext =~ /terms of the Common Development and Distribution License(, Version ([^(]+))? \(the License\)/) {
$license = "CDDL " . ($1 ? "(v$2) " : '') . $license;
}
if ($licensetext =~ /Permission is hereby granted, free of charge, to any person or organization obtaining a copy of the software and accompanying documentation covered by this license \(the \"Software\"\)/ or
$licensetext =~ /Boost Software License([ ,-]+Version ([^ ]+)?(\.))/i) {
$license = "BSL " . ($1 ? "(v$2) " : '') . $license;
}
if ($licensetext =~ /PYTHON SOFTWARE FOUNDATION LICENSE (VERSION ([^ ]+))/i) {
$license = "PSF " . ($1 ? "(v$2) " : '') . $license;
}
if ($licensetext =~ /The origin of this software must not be misrepresented.*Altered source versions must be plainly marked as such.*This notice may not be removed or altered from any source distribution/ or
$licensetext =~ /see copyright notice in zlib\.h/) {
$license = "zlib/libpng $license";
}
if ($licensetext =~ /Do What The Fuck You Want To Public License, Version ([^, ]+)/i) {
$license = "WTFPL (v$1)";
}
if ($licensetext =~ /Do what The Fuck You Want To Public License/i) {
$license = "WTFPL";
}
if ($licensetext =~ /(License WTFPL|Under (the|a) WTFPL)/i) {
$license = "WTFPL";
}
$license = "UNKNOWN" if (!length($license));
return $license;
}
sub fatal($) {
my ($pack,$file,$line);
($pack,$file,$line) = caller();
(my $msg = "$progname: fatal error at line $line:\...@_\n") =~ tr/\0//d;
$msg =~ s/\n\n$/\n/;
die $msg;
}
