Engage in the IP Due Diligence Process

[waynebeaton]

I did a quick test with the Eclipse Dash License Tool on Cargo dependencies in this repository and discovered some party libraries that may require vetting via the Eclipse IP Due Diligence Process.

$ cargo tree -e normal --prefix none --no-dedupe | sort -u \
| grep -v '^[[:space:]]*$' | grep -v "/dataplane" | grep -v "/example-common" \
| sed -E 's|([^ ]+) v([^ ]+).*|crate/cratesio/-/\1/\2|' \
| java -jar /gitroot/dash-licenses/shaded/target/org.eclipse.dash.licenses-1.1.1-SNAPSHOT.jar - -batch 50

Please make sure that you engage in the IP Due Diligence Process for all project dependencies.

The tool can be used to automatically generate requests for the IP Team to review this content.

Let me or the EMO Team know if you require assistance.

/cc @mtdelgadoa @CarmenDelgadoEclipse @rahulmohang

[jimmarino]

@waynebeaton are Rust projects supported by Dash? I can't seem to get the tool to generate the report. Note the command above does work, but not the request generation per the link.

[waynebeaton]

Yes Rust projects are supported.

How is it failing?

You'll need to get an API token from GitLab. Then, add the following switches to the command:

-review -project technology.dataplane-core -token <YOUR TOKEN>

$ cargo tree -e normal --prefix none --no-dedupe | sort -u \
| grep -v '^[[:space:]]*$' | grep -v "/dataplane" | grep -v "/example-common" \
| sed -E 's|([^ ]+) v([^ ]+).*|crate/cratesio/-/\1/\2|' \
| java -jar /gitroot/dash-licenses/shaded/target/org.eclipse.dash.licenses-1.1.1-SNAPSHOT.jar - -batch 50 -review -project technology.dataplane-core -token <YOUR TOKEN>

[jimmarino]

Thanks, that fixed it. I had an "api" switch that was mentioned in the documentation. Report submitted.