notices

Overview ¶

Command notices writes the THIRD_PARTY_NOTICES file of a release archive: the license texts of the third-party code compiled into the programs given (Go modules and the Go standard library) and bundled into compa's web UI (npm packages), with where to get each one's source.

Run it from the repository root, with the Go that built the programs:

go run ./cmd/notices -o THIRD_PARTY_NOTICES \
	-npm web/backend/dist/.vite/license.json \
	-npm web/backend/dist/.vite/css-licenses.json \
	out/compa out/compa-kernel

For each program it reads the build information Go records in it, lists the packages compiled in with go list under the same GOOS, GOARCH, cgo setting and build tags, and checks that they come from exactly the modules the program records. A module's license files are those in the directory of each of its packages compiled in, and in the directories above it up to the module's root. It fails when a module has none.