Rename asserted_license to declared_licensing #275

 Using "licensing" rather than license makes it clear that this is not a
 normalized scancode "license" but is instead the original, as
 "asserted" or "declared" licensing in a package manifest.
 Declared is the term used by SPDX.

Signed-off-by: Philippe Ombredanne <[email protected]>

Author: pombredanne

etc/scripts/json2csv.py

@@ -241,13 +241,6 @@ def collect_keys(mapping, key_group):
                     # All copyright statements are joined in a single multiline value
                     pack[nk] = '\n'.join(val)
 
-                elif k == 'asserted_licenses':
-                    # FIXME: we only keep some license data for now
-                    # All licenses are joined in a single multi-line value
-                    licenses = [license_info.get('license') for license_info in val]
-                    licenses = [lic for lic in licenses if lic]
-                    pack[nk] = '\n'.join(licenses)
-
             collect_keys(pack, 'package')
             yield pack
 

etc/scripts/sch2js/doc/Dependency-json-schema.json

@@ -0,0 +1,79 @@
+{
+  "$schema": "http://json-schema.org/draft-04/schema#", 
+  "id": "", 
+  "type": "object", 
+  "title": "dependent package", 
+  "description": "An identifiable dependent package package object.", 
+  "properties": {
+    "purl": {
+      "oneOf": [
+        {
+          "type": "string", 
+          "title": "Dependent package URL", 
+          "description": "A compact purl package URL"
+        }, 
+        {
+          "type": "null"
+        }
+      ]
+    }, 
+    "requirement": {
+      "oneOf": [
+        {
+          "type": "string", 
+          "title": "dependent package version requirement", 
+          "description": "A string defining version(s)requirements. Package-type specific."
+        }, 
+        {
+          "type": "null"
+        }
+      ]
+    }, 
+    "scope": {
+      "oneOf": [
+        {
+          "type": "string", 
+          "title": "dependency scope", 
+          "description": "The scope of this dependency, such as runtime, install, etc. This is package-type specific and is the original scope string."
+        }, 
+        {
+          "type": "null"
+        }
+      ]
+    }, 
+    "is_runtime": {
+      "oneOf": [
+        {
+          "type": "boolean", 
+          "title": "is optional flag", 
+          "description": "True if this dependency is an optional dependency"
+        }, 
+        {
+          "type": "null"
+        }
+      ]
+    }, 
+    "is_optional": {
+      "oneOf": [
+        {
+          "type": "boolean"
+        }, 
+        {
+          "type": "null"
+        }
+      ]
+    }, 
+    "is_resolved": {
+      "oneOf": [
+        {
+          "type": "boolean", 
+          "title": "is resolved flag", 
+          "description": "True if this dependency version requirement has been resolved and this dependency url points to an exact version."
+        }, 
+        {
+          "type": "null"
+        }
+      ]
+    }
+  }
+}