From a24d6e2f148417b32188cd1e643439a2858f4eac Mon Sep 17 00:00:00 2001 From: nsfisis Date: Mon, 4 May 2026 14:41:59 +0900 Subject: feat(validate): port ValidatingArrayLoader license checks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Mirror Composer's Package\Loader\ValidatingArrayLoader::load() license block: warn on non-string/wrong-shape values, validate the SPDX expression with proprietary→MIT substitution, and surface "extra spaces" diagnostics. Validity is gated on the manifest's `time` field (checked only for releases without a date or within the last 8 days), mirroring Composer's strtotime('-8days') window. --- crates/mozart-spdx-licenses/Cargo.toml | 3 --- 1 file changed, 3 deletions(-) (limited to 'crates/mozart-spdx-licenses/Cargo.toml') diff --git a/crates/mozart-spdx-licenses/Cargo.toml b/crates/mozart-spdx-licenses/Cargo.toml index 1500932..7361c93 100644 --- a/crates/mozart-spdx-licenses/Cargo.toml +++ b/crates/mozart-spdx-licenses/Cargo.toml @@ -3,9 +3,6 @@ name = "mozart-spdx-licenses" version.workspace = true edition.workspace = true -[dependencies] -indexmap.workspace = true - [build-dependencies] serde.workspace = true serde_json.workspace = true -- cgit v1.3.1