{"action":"opened","issue":{"url":"https://api.github.com/repos/pivotal/LicenseFinder/issues/295","repository_url":"https://api.github.com/repos/pivotal/LicenseFinder","labels_url":"https://api.github.com/repos/pivotal/LicenseFinder/issues/295/labels{/name}","comments_url":"https://api.github.com/repos/pivotal/LicenseFinder/issues/295/comments","events_url":"https://api.github.com/repos/pivotal/LicenseFinder/issues/295/events","html_url":"https://github.com/pivotal/LicenseFinder/issues/295","id":221105218,"number":295,"title":"Reports for Gradle projects list parent artifacts for some dependencies","user":{"login":"kdykeman","id":3085509,"avatar_url":"https://avatars3.githubusercontent.com/u/3085509?v=3","gravatar_id":"","url":"https://api.github.com/users/kdykeman","html_url":"https://github.com/kdykeman","followers_url":"https://api.github.com/users/kdykeman/followers","following_url":"https://api.github.com/users/kdykeman/following{/other_user}","gists_url":"https://api.github.com/users/kdykeman/gists{/gist_id}","starred_url":"https://api.github.com/users/kdykeman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kdykeman/subscriptions","organizations_url":"https://api.github.com/users/kdykeman/orgs","repos_url":"https://api.github.com/users/kdykeman/repos","events_url":"https://api.github.com/users/kdykeman/events{/privacy}","received_events_url":"https://api.github.com/users/kdykeman/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-04-11T23:03:18Z","updated_at":"2017-04-11T23:03:18Z","closed_at":null,"body":"If a pom for a dependency doesn't include a license, license-gradle-plugin [recursively searches](https://github.com/hierynomus/license-gradle-plugin/blob/master/src/main/groovy/nl/javadude/gradle/plugins/license/LicenseResolver.groovy#L181-L182) for a license in parent poms until it either finds one, or there is no parent. The dependency name reported in dependency-license.xml is the name of whichever pom had a license or the top-level parent after recursing.\r\n\r\nA couple of example where the results are possibly confusing/misleading:\r\n- The parent of [org.antlr:antlr-runtime:3.4](https://repo1.maven.org/maven2/org/antlr/antlr-runtime/3.4/antlr-runtime-3.4.pom) is [org.antlr:antlr-master:3.4](https://repo1.maven.org/maven2/org/antlr/antlr-master/3.4/antlr-master-3.4.pom) whose parent is [org.sonatype.oss:oss-parent:7](https://repo1.maven.org/maven2/org/sonatype/oss/oss-parent/7/oss-parent-7.pom) which has no parent. So license_finder reports the antlr-runtime dependency as \"oss-parent,7\" with no license.\r\n- [args4j:args4j:2.0.15](https://repo1.maven.org/maven2/args4j/args4j/2.0.15/args4j-2.0.15.pom) is reported by license_finder as [args4j:args4j-site](https://repo1.maven.org/maven2/args4j/args4j-site/2.0.15/args4j-site-2.0.15.pom) with no license\r\n\r\nOne option for addressing this might be a PR to license-gradle-plugin allowing the recursion to be disabled.\r\n"}}
{"actor":{"display_login":"kdykeman"}}