How do you manage the licenses of the dependencies (libraries) of your project? [closed]

Answer 1

A customized solution for use with Artifactory + Ivy + ant is to scan each module for license information. If the license is found, populate that license file in Artifactory and update it's ivy.xml to have it available as a published artifact. Then call to fetch the license along with its jar file.

The license can be specified within the module's ivy.xml as a URL. In this case, use ant's get task to download the license and write it to a text file.

[inside log4j's ivy.xml as an example]

 
  
   ...
 
 

Alternatively, the license can be included as a text file within the module's .jar file. In this case, use ant's unjar task to extract the license and write it to a text file.

[inside junit's .jar file as an example]
 junit-4.8.2.jar/LICENSE.txt

Once the license has been written out as a text file, use ant's xmltask task to add the license as an artifact.

[inside log4j's ivy.xml as an example]

 
 
 
 
  

Publish the modified ivy.xml and the license back to Artifactory.

Use to fetch the license along with its jar file when bundling with your build.