merge develop

Author: liss-h

.gitignore

@@ -0,0 +1,3 @@
+/target
+/.idea
+Cargo.lock

Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "tentris-license-aggregator"
+version = "0.1.0"
+edition = "2021"
+keywords = ["build-script", "licenses", "spdx"]
+repository = "https://github.com/dice-group/tentris-license-aggregator"
+readme = "README.md"
+license = "MIT OR Apache-2.0"
+
+[dependencies]
+anyhow = "1.0.95"
+tracing = "0.1.41"
+cargo-about = "0.6.6"
+krates = "0.17.5"
+spdx = "0.10.8"
+reqwest = { version = "0.12.12", default-features = false, features = ["blocking", "rustls-tls"] }
+serde = { version = "1.0.217", features = ["derive"] }

README.md

@@ -0,0 +1,12 @@
+# tentris-license-aggregator
+
+A library based on [cargo-about](https://github.com/EmbarkStudios/cargo-about) to collect
+rust licenses and to augment licenses of non-rust dependencies scraped by a third party tool that may
+not have knowledge about the SPDX identifiers of individual license files (e.g. conan).
+
+### Differences to cargo-about
+1. While `cargo-about` accumulates all dependencies that have a specific license,
+   `tentris-license-aggregator` accumulates all licenses for each dependency
+   (i.e. the collected results are `Vec<tentris_license_aggregator::Package>` (see `pub struct Package` in [lib.rs](src/lib.rs)).
+2. `tentris-license-aggregator` allows to detect SPDX identifiers for licenses collected by a third party tool (e.g. conan)
+    that does not know them