[umaucher]

Declares this module's license (SPDX Apache-2.0) using rules_license, so downstream tooling can determine it automatically instead of relying on per-consumer manual declarations (see eclipse-score/persistency#um_sbom_tool2 discussion on score_sbom license handling).

This is a suggestion/prototype to validate the approach and drive further score_sbom development — score_sbom does not yet consume rules_license providers, so this alone does not change any generated SBOM output.

Companion change: eclipse-score/baselibs (branch um_rules_license).

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run --lockfile_mode=error //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: 636eae6b-8c8f-4f35-aa91-0438aa0bd67d
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 2 packages loaded
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)

Analyzing: target //:license-check (63 packages loaded, 13 targets configured)

Analyzing: target //:license-check (103 packages loaded, 123 targets configured)

Analyzing: target //:license-check (149 packages loaded, 3136 targets configured)

Analyzing: target //:license-check (149 packages loaded, 3136 targets configured)

Analyzing: target //:license-check (149 packages loaded, 3136 targets configured)

Analyzing: target //:license-check (159 packages loaded, 6232 targets configured)

Analyzing: target //:license-check (166 packages loaded, 8899 targets configured)

Analyzing: target //:license-check (171 packages loaded, 9393 targets configured)

Analyzing: target //:license-check (172 packages loaded, 9401 targets configured)

Analyzing: target //:license-check (172 packages loaded, 9401 targets configured)

Analyzing: target //:license-check (175 packages loaded, 11289 targets configured)

Analyzing: target //:license-check (175 packages loaded, 11289 targets configured)

Analyzing: target //:license-check (176 packages loaded, 11413 targets configured)

INFO: Analyzed target //:license-check (177 packages loaded, 11539 targets configured).
[6 / 16] Writing repo mapping manifest for //:license.check.license_check; 0s local
[13 / 17] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 0s disk-cache, processwrapper-sandbox ... (2 actions running)
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 66 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
[15 / 17] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 35.287s, Critical Path: 2.55s
INFO: 17 processes: 12 internal, 4 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 17 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[github-actions]

The created documentation from the pull request is available at: docu-html

[umaucher]

obsolete might be discussed again if https://github.com/bazel-contrib/supply-chain gets in shape