CI: Check licenses of all dependencies (#17)

* ci: check licenses of dependencies
* ci: license, check --all-features

.github/workflows/develop.yml

@@ -19,6 +19,11 @@ jobs:
           targets: wasm32-unknown-unknown
           components: rustfmt, clippy
 
+      - name: Run the license check
+        run: |
+          cargo install cargo-license
+          cargo license --gitlab --all-features | python3 license.py
+
       - name: Run cargo test
         run: cargo test --all-features
 

.github/workflows/master.yml

@@ -19,6 +19,11 @@ jobs:
           targets: wasm32-unknown-unknown
           components: rustfmt, clippy
 
+      - name: Run the license check
+        run: |
+          cargo install cargo-license
+          cargo license --gitlab --all-features | python3 license.py
+
       - name: Run cargo test
         run: cargo test --all-features
 

channel/Cargo.toml

@@ -2,6 +2,7 @@
 name = "channel"
 version = "0.1.0"
 edition = "2021"
+license = "MIT"
 
 [dependencies]
 ark-ff.workspace = true

commitment_scheme/Cargo.toml

@@ -2,6 +2,7 @@
 name = "commitment_scheme"
 version = "0.1.0"
 edition = "2021"
+license = "MIT"
 
 [dependencies]
 ark-ff.workspace = true
@@ -10,10 +11,10 @@ sha3.workspace = true
 poseidon = { path = "../poseidon" }
 felt = { path = "../felt" }
 channel = { path = "../channel" }
-randomness ={ path = "../randomness" }
+randomness = { path = "../randomness" }
 anyhow.workspace = true
 num-bigint.workspace = true
 
 [dev-dependencies]
-hex.workspace = true 
-rand.workspace = true
+hex.workspace = true
+rand.workspace = true

felt/Cargo.toml

@@ -2,6 +2,7 @@
 name = "felt"
 version = "0.1.0"
 edition = "2021"
+license = "MIT"
 
 [dependencies]
 ark-ff.workspace = true

fri/Cargo.toml

@@ -2,6 +2,7 @@
 name = "fri"
 version = "0.1.0"
 edition = "2021"
+license = "MIT"
 
 [dependencies]
 ark-ff.workspace = true

license.py

@@ -0,0 +1,19 @@
+import sys
+import json
+
+# check the license before adding it here:
+# we want to avoid viral licenses like GPL
+ALLOWED = {
+    "Unlicense",
+    "MIT",
+    "Apache-2.0",
+    "BSL-1.0",
+    "Unicode-DFS-2016",
+    "BSD-3-Clause",
+}
+
+licenses = json.loads(sys.stdin.read())
+
+for dep in licenses["dependencies"]:
+    print(f'{dep["name"]}-{dep["version"]}: {", ".join(dep["licenses"])}')
+    assert len(set(dep["licenses"]).intersection(ALLOWED)) > 0, dep

poseidon/Cargo.toml

@@ -2,6 +2,7 @@
 name = "poseidon"
 version = "0.1.0"
 edition = "2021"
+license = "MIT"
 
 [dependencies]
 ark-ff.workspace = true

randomness/Cargo.toml

@@ -2,6 +2,7 @@
 name = "randomness"
 version = "0.1.0"
 edition = "2021"
+license = "MIT"
 
 [dependencies]
 ark-ff.workspace = true