fix: Root package reuse compliance

Author: d3xter666

.github/workflows/reuse-compliance.yml

@@ -14,11 +14,10 @@ permissions: {}
 jobs:
   compliance-check:
     name: Compliance Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         package:
-          - "."
           - "packages/builder"
           - "packages/cli"
           - "packages/documentation"
@@ -28,6 +27,15 @@ jobs:
           - "packages/server"
     steps:
     - uses: actions/checkout@v5
+
+    - name: Setup Node.js
+      uses: actions/setup-node@v6
+      with:
+        node-version: 22.20.0
+        
+    - name: Execute REUSE Compliance Check for root package only
+      run: ./scripts/check-root-reuse-compliance.sh
+
     - name: Execute REUSE Compliance Check for ${{ matrix.package }}
       uses: fsfe/reuse-action@v6
       with:

REUSE.toml

@@ -2,7 +2,7 @@ version = 1
 SPDX-PackageName = "ui5-cli"
 SPDX-PackageSupplier = "SAP OpenUI5 <[email protected]>"
 SPDX-PackageDownloadLocation = "https://github.com/UI5/cli"
-SPDX-PackageComment = "The code in this project may include calls to APIs ("API Calls") of\n SAP or third-party products or services developed outside of this project\n ("External Products").\n "APIs" means application programming interfaces, as well as their respective\n specifications and implementing code that allows software to communicate with\n other software.\n API Calls to External Products are not licensed under the open source license\n that governs this project. The use of such API Calls and related External\n Products are subject to applicable additional agreements with the relevant\n provider of the External Products. In no event shall the open source license\n that governs this project grant any rights in or to any External Products,or\n alter, expand or supersede any terms of the applicable additional agreements.\n If you have a valid license agreement with SAP for the use of a particular SAP\n External Product, then you may make use of any API Calls included in this\n project's code for that SAP External Product, subject to the terms of such\n license agreement. If you do not have a valid license agreement for the use of\n a particular SAP External Product, then you may only make use of any API Calls\n in this project for that SAP External Product for your internal, non-productive\n and non-commercial test and evaluation of such API Calls. Nothing herein grants\n you any rights to use or access any SAP External Product, or provide any third\n parties the right to use of access any SAP External Product, through API Calls."
+SPDX-PackageComment = "The code in this project may include calls to APIs (“API Calls”) of\n SAP or third-party products or services developed outside of this project\n (“External Products”).\n “APIs” means application programming interfaces, as well as their respective\n specifications and implementing code that allows software to communicate with\n other software.\n API Calls to External Products are not licensed under the open source license\n that governs this project. The use of such API Calls and related External\n Products are subject to applicable additional agreements with the relevant\n provider of the External Products. In no event shall the open source license\n that governs this project grant any rights in or to any External Products,or\n alter, expand or supersede any terms of the applicable additional agreements.\n If you have a valid license agreement with SAP for the use of a particular SAP\n External Product, then you may make use of any API Calls included in this\n project’s code for that SAP External Product, subject to the terms of such\n license agreement. If you do not have a valid license agreement for the use of\n a particular SAP External Product, then you may only make use of any API Calls\n in this project for that SAP External Product for your internal, non-productive\n and non-commercial test and evaluation of such API Calls. Nothing herein grants\n you any rights to use or access any SAP External Product, or provide any third\n parties the right to use of access any SAP External Product, through API Calls."
 
 [[annotations]]
 path = ["docs/**", "examples/**", "resources/**", "rfcs/**", "scripts/**", "site/**", ".github/**", ".husky/**", ".vscode/**"]

scripts/check-root-reuse-compliance.sh

@@ -0,0 +1,51 @@
+#!/bin/bash
+
+# SPDX-FileCopyrightText: 2025 SAP SE or an SAP affiliate company and UI5 CLI contributors
+# SPDX-License-Identifier: Apache-2.0
+
+# Script to check REUSE compliance for root files only (excluding packages folder)
+#
+# WHY THIS SCRIPT IS NEEDED:
+# Standard 'reuse lint' from the root folder scans the entire repository including packages/*,
+# but we have a scan for each package separately and here we want to check only the root-level files.
+
+echo "🔍 Checking REUSE compliance for root workspace files (excluding packages)..."
+
+CHECKED_FILES=0
+FAILED_FILES=0
+
+# Function to check a single file
+check_file() {
+    if npx reuse lint-file "$1" >/dev/null 2>&1; then
+        return 0
+    else
+        FAILED_FILES=$((FAILED_FILES + 1))
+        return 1
+    fi
+}
+
+# Get all root files (excluding packages directory)
+FILES=$(find . -maxdepth 1 -type f ! -name '.*' && \
+        find .editorconfig .gitattributes .gitignore .licensee.json .npmrc 2>/dev/null && \
+        find docs examples resources rfcs scripts site .github .husky .vscode LICENSES -type f 2>/dev/null)
+
+# Check each file
+for file in $FILES; do
+    check_file "$file"
+    CHECKED_FILES=$((CHECKED_FILES + 1))
+done
+
+# Summary
+echo ""
+echo "📊 Summary:"
+echo "   Total files checked: $CHECKED_FILES"
+echo "   Failed files: $FAILED_FILES"
+echo "   Success rate: $(( (CHECKED_FILES - FAILED_FILES) * 100 / CHECKED_FILES ))%"
+
+if [ $FAILED_FILES -eq 0 ]; then
+    echo "🎉 All root workspace files are REUSE compliant!"
+    exit 0
+else
+    echo "❌ $FAILED_FILES files failed REUSE compliance"
+    exit 1
+fi