Clarify copyright and waiver

[cc0/argeo-build.git] / src / org / argeo / build / Repackage.java

diff --git a/src/org/argeo/build/Repackage.java b/src/org/argeo/build/Repackage.java
index 36d61fec376def678c500b4281e2a411aca30fb4..89522c03c1c61e56c705dffc514542bb4d75dad0 100644 (file)
--- a/src/org/argeo/build/Repackage.java
+++ b/src/org/argeo/build/Repackage.java
@@ -1164,9 +1164,20 @@ public class Repackage {
                        if (orIndex >= 0)
                                spdxLicenceId = spdxLicenceId.substring(0, orIndex).trim();
 
-                       // bundles starting with org.apache MUST be licensed with Apache-2.0
-                       // even if we say otherwise (typically because coming from an Eclipse archive)
-                       if (bundleDir.getFileName().startsWith("org.apache."))
+                       String bundleDirName = bundleDir.getFileName().toString();
+                       // force licenses of some well-known components
+                       // even if we say otherwise (typically because from an Eclipse archive)
+                       if (bundleDirName.startsWith("org.apache."))
+                               spdxLicenceId = "Apache-2.0";
+                       if (bundleDirName.startsWith("com.sun.jna."))
+                               spdxLicenceId = "Apache-2.0";
+                       if (bundleDirName.startsWith("com.ibm.icu."))
+                               spdxLicenceId = "ICU";
+                       if (bundleDirName.startsWith("javax.annotation."))
+                               spdxLicenceId = "GPL-2.0-only WITH Classpath-exception-2.0";
+                       if (bundleDirName.startsWith("javax.inject."))
+                               spdxLicenceId = "Apache-2.0";
+                       if (bundleDirName.startsWith("org.osgi."))
                                spdxLicenceId = "Apache-2.0";
 
                        manifest.getMainAttributes().putValue(SPDX_LICENSE_IDENTIFIER.toString(), spdxLicenceId);
@@ -1284,15 +1295,15 @@ public class Repackage {
 
        /** Create a JAR file from a directory. */
        Path createJar(Path bundleDir, A2Origin origin) throws IOException {
-               // write changes
-               origin.appendChanges(bundleDir);
-
                Path manifestPath = bundleDir.resolve("META-INF/MANIFEST.MF");
                Manifest manifest;
                try (InputStream in = Files.newInputStream(manifestPath)) {
                        manifest = new Manifest(in);
                }
+               // legal requirements
+               origin.appendChanges(bundleDir);
                createReadMe(bundleDir, manifest);
+
                // create the jar
                Path jarPath = bundleDir.getParent().resolve(bundleDir.getFileName() + ".jar");
                try (JarOutputStream jarOut = new JarOutputStream(Files.newOutputStream(jarPath), manifest)) {
@@ -1366,6 +1377,10 @@ public class Repackage {
                deleteDirectory(sourceDir);
        }
 
+       /**
+        * Generate a readme clarifying and prominently notifying of the repackaging and
+        * modifications.
+        */
        void createReadMe(Path jarDir, Manifest manifest) throws IOException {
                // write repackaged README
                try (BufferedWriter writer = Files.newBufferedWriter(jarDir.resolve(README_REPACKAGED))) {
@@ -1377,19 +1392,48 @@ public class Repackage {
                                writer.append("This component is a repackaging of a third party component"
                                                + " in order to comply with A2 packaging standards.\n");
 
+                       // license
+                       String spdxLicenseId = manifest.getMainAttributes().getValue(SPDX_LICENSE_IDENTIFIER.toString());
+                       if (spdxLicenseId == null)
+                               throw new IllegalStateException("An SPDX license id must have beend defined at this stage.");
+                       writer.append("\nIt is redistributed under the following license:\n\n");
+                       writer.append("SPDX-Identifier: " + spdxLicenseId + "\n\n");
+
+                       if (!spdxLicenseId.startsWith("LicenseRef")) {// standard
+                               int withIndex = spdxLicenseId.indexOf(" WITH ");
+                               if (withIndex >= 0) {
+                                       String simpleId = spdxLicenseId.substring(0, withIndex).trim();
+                                       String exception = spdxLicenseId.substring(withIndex + " WITH ".length());
+                                       writer.append("which are available here: https://spdx.org/licenses/" + simpleId
+                                                       + "\nand here: https://spdx.org/licenses/" + exception + "\n");
+                               } else {
+                                       writer.append("which is available here: https://spdx.org/licenses/" + spdxLicenseId + "\n");
+                               }
+                       } else {
+                               String url = manifest.getMainAttributes().getValue(BUNDLE_LICENSE.toString());
+                               if (url != null) {
+                                       writer.write("which is available here: " + url + "\n");
+                               } else {
+                                       logger.log(ERROR, "No licne URL for " + jarDir);
+                               }
+                       }
+                       writer.write("\n");
+
+                       // origin
                        String m2Repo = manifest.getMainAttributes().getValue(ARGEO_ORIGIN_M2_REPO.toString());
                        String originDesc = manifest.getMainAttributes().getValue(ARGEO_ORIGIN_M2.toString());
                        if (originDesc != null)
-                               writer.append("The original component has Maven coordinates " + originDesc
-                                               + (m2Repo != null ? " in M2 repository" + m2Repo : "") + ".\n");
-                       else
+                               writer.append("The original component has M2 coordinates:\n" + originDesc.replace(',', '\n') + "\n"
+                                               + (m2Repo != null ? "\nin M2 repository " + m2Repo + "\n" : ""));
+                       else {
                                originDesc = manifest.getMainAttributes().getValue(ARGEO_ORIGIN_URI.toString());
-                       if (originDesc != null)
-                               writer.append("The original component comes from " + originDesc + ".\n");
-                       else
-                               logger.log(ERROR, "Cannot find origin information in " + jarDir);
+                               if (originDesc != null)
+                                       writer.append("The original component comes from " + originDesc + ".\n");
+                               else
+                                       logger.log(ERROR, "Cannot find origin information in " + jarDir);
+                       }
 
-                       writer.append("A detailed list of changes is available under " + CHANGES + ".\n");
+                       writer.append("\nA detailed list of changes is available under " + CHANGES + ".\n");
                        if (!jarDir.getFileName().endsWith(".src")) {// binary archive
                                if (sourceBundles)
                                        writer.append("Corresponding sources are available in the related archive named "