diff --git a/SPDX-fields-maven-mapping.xlsx b/SPDX-fields-maven-mapping.xlsx index 5d6af3e..30d70ca 100644 Binary files a/SPDX-fields-maven-mapping.xlsx and b/SPDX-fields-maven-mapping.xlsx differ diff --git a/SpdxTools-POM-File-Example.xml b/SpdxTools-POM-File-Example.xml new file mode 100644 index 0000000..4a3b257 --- /dev/null +++ b/SpdxTools-POM-File-Example.xml @@ -0,0 +1,455 @@ + + 4.0.0 + org.spdx + spdx-tools + 2.1.17-SNAPSHOT + SPDX tools + SPDX tools + + + The Apache Software License, Version 2.0 + http://www.apache.org/licenses/LICENSE-2.0.txt + repo + + + http://spdx.org/tools + + + goneall + Gary O'Neall + gary@sourceauditor.com + SPDX + http://spdx.org + + + + Linux Foundation + http://www.linuxfoundation.org + + + https://github.com/spdx/tools + scm:git:ssh://git@github.com:spdx/tools.git + scm:git:ssh://git@github.com:spdx/tools.git + + + + bintray-spdx-spdx-tools + spdx-spdx-tools + https://api.bintray.com/maven/spdx/spdx-tools/spdx-tools-java/;publish=1 + + + + UTF-8 + 3.10.0 + + + + + + org.apache.thrift + libthrift + 0.12.0 + pom + + + + com.fasterxml.jackson.core + jackson-databind + 2.9.8 + + + + org.apache.commons + commons-compress + 1.18 + + + org.apache.jena + apache-jena-libs + ${jena.version} + pom + + + org.apache.jena + jena-iri + ${jena.version} + jar + + + org.antlr + antlr + 3.4 + + + org.apache.commons + commons-lang3 + 3.1 + + + org.apache.poi + poi + 3.17 + + + org.apache.poi + poi-ooxml + 3.17 + + + net.sf.opencsv + opencsv + 2.3 + + + nu.validator.htmlparser + htmlparser + 1.4 + + + net.sf.saxon + saxon + 8.7 + + + org.jsoup + jsoup + 1.11.3 + + + com.google.guava + guava + 24.1.1-jre + + + com.github.spullara.mustache.java + compiler + 0.7.9 + + + org.apache.logging.log4j + log4j-api + 2.10.0 + + + org.apache.logging.log4j + log4j-core + 2.10.0 + + + org.apache.logging.log4j + log4j-slf4j-impl + 2.10.0 + + + junit + junit + 4.12 + test + + + com.google.code.gson + gson + 2.8.0 + + + net.sf.saxon + saxon-dom + 8.7 + + + com.github.cliftonlabs + json-simple + 2.3.1 + + + + + doclint-java8-disable + + [1.8,) + + + -Xdoclint:none + + + + gpg-signing + + + + org.apache.maven.plugins + maven-gpg-plugin + 1.6 + + + sign-artifacts + verify + + sign + + + ${gpg.keyname} + ${gpg.keyname} + + + + + + + + + + + src + Test + + + resources + false + resources + + **/* + + + + META-INF + false + . + + NOTICE + LICENSE + README.md + changelog + + + + src + + **/*.java + + + + + + Test + + **/*.java + + + + false + TestFiles + + **/* + + + + + + + org.spdx + spdx-maven-plugin + 0.5.1 + + + build-spdx + prepare-package + + createSPDX + + + + + LICENSE.spdx + http://spdx.org/documents/spdx-tools{$version} + + + LicenseRef-CyberNeko + The CyberNeko Software License, Version 1.0 + + +(C) Copyright 2002-2005, Andy Clark. All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: + +1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + +2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in + the documentation and/or other materials provided with the + distribution. + +3. The end-user documentation included with the redistribution, + if any, must include the following acknowledgment: + "This product includes software developed by Andy Clark." + Alternately, this acknowledgment may appear in the software itself, + if and wherever such third-party acknowledgments normally appear. + +4. The names "CyberNeko" and "NekoHTML" must not be used to endorse + or promote products derived from this software without prior + written permission. For written permission, please contact + andyc@cyberneko.net. + +5. Products derived from this software may not be called "CyberNeko", + nor may "CyberNeko" appear in their name, without prior written + permission of the author. + +THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED +WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES +OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR OTHER CONTRIBUTORS +BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, +OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT +OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, +EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +==================================================================== + +This license is based on the Apache Software License, version 1.1. + The CyberNeko Software License, Version 1.0 + + + Copyright (c) 2012, 2013, 2014, 2015, 2016, 2017 Source Auditor Inc. + + Gary O'Neall + + Apache-2.0 + Apache-2.0 + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. + Apache-2.0 + (Apache-2.0 AND MIT AND LicenseRef-CyberNeko AND LGPL-2.1 AND BSD-3-Clause AND X11 AND MPL-1.0) + + Person: Gary O'Neall + + Organization: Linux Foundation + + + + org.apache.maven.plugins + maven-compiler-plugin + 3.6.1 + + 1.8 + 1.8 + ${project.build.sourceEncoding} + true + true + true + + + + org.apache.maven.plugins + maven-resources-plugin + 2.6 + + ${project.build.sourceEncoding} + + + + + org.apache.maven.plugins + maven-source-plugin + 2.2.1 + + + attach-sources + + jar-no-fork + + + + + + + org.apache.maven.plugins + maven-javadoc-plugin + 2.9 + + true + -Xdoclint:none + + + + attach-javadocs + + ${javadoc.opts} + + + jar + + + + + + org.apache.maven.plugins + maven-shade-plugin + + true + jar-with-dependencies + + + org.spdx.tools.Main + + + + + false + + + + + + com.yevster.net.rootdev:java-rdfa + + nu/validator/htmlparser/** + + + + *:* + + META-INF/*.SF + META-INF/*.DSA + META-INF/*.RSA + + + + + + + package + + + shade + + + + + + + + + + org.codehaus.mojo + findbugs-maven-plugin + 3.0.1 + + + +