From 9b74ba0d24d17de6ee6cfe67e4e7885a04de6cca Mon Sep 17 00:00:00 2001
From: Zongle Wang <wangzongler@gmail.com>
Date: Wed, 2 Apr 2025 15:03:10 -0400
Subject: [PATCH] Set up Licensee (#5030)

Refs #4024.
---
 .github/workflows/check-and-build.yml |   3 +
 app/build.gradle                      |  10 ++
 build.gradle                          |   1 +
 gradle/libs.versions.toml             |   1 +
 gradle/verification-metadata.xml      | 154 ++++++++++++++++++++++++++
 5 files changed, 169 insertions(+)

diff --git a/.github/workflows/check-and-build.yml b/.github/workflows/check-and-build.yml
index 6bd7308e9..c1f230f81 100644
--- a/.github/workflows/check-and-build.yml
+++ b/.github/workflows/check-and-build.yml
@@ -14,6 +14,9 @@ jobs:
       - name: Setup
         uses: ./.github/actions/setup
 
+      - name: Licensee
+        run: ./gradlew licensee
+
       - name: ktlint
         run: ./gradlew clean ktlintCheck
 
diff --git a/app/build.gradle b/app/build.gradle
index cc7615696..f8258d8e8 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -1,9 +1,12 @@
+import app.cash.licensee.SpdxId
+
 plugins {
     alias(libs.plugins.android.application)
     alias(libs.plugins.google.ksp)
     alias(libs.plugins.hilt.android)
     alias(libs.plugins.kotlin.android)
     alias(libs.plugins.kotlin.parcelize)
+    alias(libs.plugins.licensee)
 }
 
 apply from: 'getGitSha.gradle'
@@ -128,6 +131,13 @@ ksp {
     arg("room.incremental", "true")
 }
 
+licensee {
+    allow(SpdxId.Apache_20)
+    allow(SpdxId.MIT)
+    allowUrl('https://github.com/AOMediaCodec/libavif/blob/master/LICENSE')
+    allowUrl('https://www.bouncycastle.org/licence.html')
+}
+
 configurations {
     // JNI-only libraries don't play nicely with Robolectric
     // see https://github.com/tuskyapp/Tusky/pull/3367
diff --git a/build.gradle b/build.gradle
index 6fe4a064a..f629e2dbc 100644
--- a/build.gradle
+++ b/build.gradle
@@ -5,6 +5,7 @@ plugins {
     alias(libs.plugins.kotlin.android) apply false
     alias(libs.plugins.kotlin.parcelize) apply false
     alias(libs.plugins.ktlint) apply false
+    alias(libs.plugins.licensee) apply false
 }
 
 allprojects {
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 01c18776d..6538b5326 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -57,6 +57,7 @@ hilt-android = { id = "com.google.dagger.hilt.android", version.ref = "hilt" }
 kotlin-android = { id = "org.jetbrains.kotlin.android", version.ref = "kotlin" }
 kotlin-parcelize = { id = "org.jetbrains.kotlin.plugin.parcelize", version.ref = "kotlin" }
 ktlint = "org.jlleitschuh.gradle.ktlint:12.2.0"
+licensee = "app.cash.licensee:1.13.0"
 
 [libraries]
 android-material = { module = "com.google.android.material:material", version.ref = "material" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index dfbe0c25d..60811e72b 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -3615,6 +3615,19 @@
             <sha256 value="685e43a946f5bef2259be90cbd7e8bf16383d4e87e4d3840db8bc7d4de3d7dbe" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="app.cash.licensee" name="app.cash.licensee.gradle.plugin" version="1.13.0">
+         <artifact name="app.cash.licensee.gradle.plugin-1.13.0.pom">
+            <sha256 value="e50cc03b32e3ff12a69ff5144ee3980d7580a96fc434846b7e5bb6c488bef2fb" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="app.cash.licensee" name="licensee-gradle-plugin" version="1.13.0">
+         <artifact name="licensee-gradle-plugin-1.13.0.jar">
+            <sha256 value="b42f2d66d75c3ebcdf57f30aa0955424762f2df80e7b743922f6cdfec985daea" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="licensee-gradle-plugin-1.13.0.module">
+            <sha256 value="7ea49de5191feb75e319253a10fd5bdf64063f208e6912d6b6742cd4cabb98cc" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="app.cash.turbine" name="turbine" version="1.1.0">
          <artifact name="Turbine-metadata.jar">
             <sha256 value="ef32d46a2e2e04b748f8e105ebb96508ba2f7c0cf28f689a3160774f33bee22d" origin="Generated by Gradle"/>
@@ -14700,6 +14713,11 @@
             <sha256 value="66d7224d73cd1c350b7523e2d70c11e366fbea51d9cf61ff1099149de35d7fb0" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="dev.drewhamilton.poko" name="poko-annotations" version="0.18.2">
+         <artifact name="poko-annotations-0.18.2.module">
+            <sha256 value="4868cdc15a321b11ab3c8c5b6eaac4d3dda8520851fcd2db234fc37aaeebe4ce" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="dev.drewhamilton.poko" name="poko-annotations-jvm" version="0.15.0">
          <artifact name="poko-annotations-jvm-0.15.0-sources.jar">
             <sha256 value="7a735dde85bad254b3b48a1e272de91640c80cf855fafbeee569ba66edeced6d" origin="Generated by Gradle"/>
@@ -14711,6 +14729,14 @@
             <sha256 value="b79c2f6f898fa8e1bf1415a85a14f98fd99f770e00b3e91e9ba6cf1d915bbbff" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="dev.drewhamilton.poko" name="poko-annotations-jvm" version="0.18.2">
+         <artifact name="poko-annotations-jvm-0.18.2.jar">
+            <sha256 value="e54daa81cd038929633aec59606022e1eaa3432a3ca673494bbf1ae55e42234d" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="poko-annotations-jvm-0.18.2.module">
+            <sha256 value="a060d70838ff686617f43125831d1057b281081af46d9942f0c0ae38cd607ba7" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="info.picocli" name="picocli" version="4.7.5">
          <artifact name="picocli-4.7.5.jar">
             <sha256 value="e83a906fb99b57091d1d68ac11f7c3d2518bd7a81a9c71b259e2c00d1564c8e8" origin="Generated by Gradle"/>
@@ -15306,6 +15332,48 @@
             <sha256 value="dfbfd6ffe2a784ca9817c46365aa7f8a578320b805bde39d6f55a0b09d8aa8ca" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.maven" name="maven" version="3.9.9">
+         <artifact name="maven-3.9.9.pom">
+            <sha256 value="d24ed68923df210d085bb5d386d4336d12ede5473392e159d5e6e64497af6f39" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.maven" name="maven-artifact" version="3.9.9">
+         <artifact name="maven-artifact-3.9.9.jar">
+            <sha256 value="30f015d1c1a393e19c18cd4f43532089c36d4ca328608ce3dda78b74d3d31515" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="maven-artifact-3.9.9.pom">
+            <sha256 value="65ddf76b92a707b9f1240eccbb4774b30d4c77778671291fd355e06d4d3a96df" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.maven" name="maven-builder-support" version="3.9.9">
+         <artifact name="maven-builder-support-3.9.9.jar">
+            <sha256 value="2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="maven-builder-support-3.9.9.pom">
+            <sha256 value="0ac318002f110571baa571ecf20697fec4767048d297e2688455b914d5030ffe" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.maven" name="maven-model" version="3.9.9">
+         <artifact name="maven-model-3.9.9.jar">
+            <sha256 value="8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="maven-model-3.9.9.pom">
+            <sha256 value="1b48062b15387c1c4204157ae19a560919dfb5728b3e92a11e5503f222faab4a" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.maven" name="maven-model-builder" version="3.9.9">
+         <artifact name="maven-model-builder-3.9.9.jar">
+            <sha256 value="a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="maven-model-builder-3.9.9.pom">
+            <sha256 value="9d23af0e0f23224c203209d11b76ac6090a5a967d3d887a920a7a47b260c0bd8" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.maven" name="maven-parent" version="43">
+         <artifact name="maven-parent-43.pom">
+            <sha256 value="468a1262e9aaa5febf9d604e2836267f815351f2b4520f28fb17f53c71e33554" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.bitbucket.b_c" name="jose4j" version="0.7.0">
          <artifact name="jose4j-0.7.0.jar">
             <sha256 value="eb14f69c0395d4a106c6c46fe6dff080c4608ccabc99b1f03933d374383d9bbe" origin="Generated by Gradle"/>
@@ -15481,6 +15549,32 @@
             <sha256 value="1472325a16f0b1bdabed21fa4839372964944610294ce2681b2059edc654f2b3" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.codehaus.plexus" name="plexus" version="10">
+         <artifact name="plexus-10.pom">
+            <sha256 value="bba9c521064b9ca132ce97cc1cc7eb4afc2dbe32bc88cb872c88e99f6162301f" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.codehaus.plexus" name="plexus" version="16">
+         <artifact name="plexus-16.pom">
+            <sha256 value="68d4eed65a3dbbc342ed80dd138fbe9c67cb7fb4c2abc4f5201cdb5b9f645868" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.codehaus.plexus" name="plexus-interpolation" version="1.27">
+         <artifact name="plexus-interpolation-1.27.jar">
+            <sha256 value="3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="plexus-interpolation-1.27.pom">
+            <sha256 value="d54fbcbc4399e352322874a4128b9d28fe9fe1583f89ec361de242ea38d33f9b" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.codehaus.plexus" name="plexus-utils" version="3.5.1">
+         <artifact name="plexus-utils-3.5.1.jar">
+            <sha256 value="86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="plexus-utils-3.5.1.pom">
+            <sha256 value="94ff68edeb48204d12c99189c767164d3a9f778a1372d1dce11a41462e6236f2" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.conscrypt" name="conscrypt-android" version="2.5.2">
          <artifact name="conscrypt-android-2.5.2-sources.jar">
             <sha256 value="d7b34504e1c77dbe866f08b1f12e0908c1c3456e8d7eabef1a819b78ac1ad406" origin="Generated by Gradle"/>
@@ -15536,6 +15630,19 @@
             <sha256 value="4e7d8329d8da7dcf30779d824241be145f27108932f5a5a24eb907677bc8d72d" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.eclipse.sisu" name="org.eclipse.sisu.inject" version="0.9.0.M3">
+         <artifact name="org.eclipse.sisu.inject-0.9.0.M3.jar">
+            <sha256 value="15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="org.eclipse.sisu.inject-0.9.0.M3.pom">
+            <sha256 value="57ed17e057ba716cc1f1e5b2d4e014a68c3d50bd33498227a90f712519334dd4" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.eclipse.sisu" name="sisu-inject" version="0.9.0.M3">
+         <artifact name="sisu-inject-0.9.0.M3.pom">
+            <sha256 value="2e436563d5caea351bce5f0863ebc6376405cb65a6f664b255faad9e72e3b854" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.glassfish.jaxb" name="jaxb-bom" version="2.3.2">
          <artifact name="jaxb-bom-2.3.2.pom">
             <sha256 value="a1018bb54678ed9f5acb2f7a4084e385ff510201f4e9dbf5f75dc6a675f66be7" origin="Generated by Gradle"/>
@@ -18178,6 +18285,11 @@
             <sha256 value="29d69842bb7d449be2aa4ade6a4a7ce6aa55827d0ab13d168745fe6d95739332" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-bom" version="1.8.0">
+         <artifact name="kotlinx-serialization-bom-1.8.0.pom">
+            <sha256 value="c43e487529ccfd1209eba8653ab8e89598203464aafbfe5f0448ded992871509" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-core" version="1.4.1">
          <artifact name="kotlinx-serialization-core-1.4.1.module">
             <sha256 value="60e581c397ddb9461ec1f1dee5bbb4a23bb7ec7d09b296024196220022aa7090" origin="Generated by Gradle"/>
@@ -18188,6 +18300,11 @@
             <sha256 value="361e9e31eb7296174b74085ac49edd84a4f3900ba9431a4e40cd1c23de76a328" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-core" version="1.8.0">
+         <artifact name="kotlinx-serialization-core-1.8.0.module">
+            <sha256 value="984d9aa9a6e9bcc38d7e836ea8d000b13872087fc6658d0d8d62257633f395f1" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-core-jvm" version="1.4.1">
          <artifact name="kotlinx-serialization-core-jvm-1.4.1.jar">
             <sha256 value="eba7f1c854296e4ce1418fb01360f8f10c5683e7c45aa3472018417a067636f3" origin="Generated by Gradle"/>
@@ -18204,6 +18321,14 @@
             <sha256 value="329104dbd34e4bde905611d427c7584e53c3f8c411836fb9f699ac9dba5baa6c" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-core-jvm" version="1.8.0">
+         <artifact name="kotlinx-serialization-core-jvm-1.8.0.jar">
+            <sha256 value="d3c94e9d829bba6e0c4cd3ae478a40846dd49d5475d6707877be853976afe416" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="kotlinx-serialization-core-jvm-1.8.0.module">
+            <sha256 value="3731fcd238561a90a9752b3485f1d635e01b445e4a77817d7b077f4b9d2f422d" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-json" version="1.4.1">
          <artifact name="kotlinx-serialization-json-1.4.1.module">
             <sha256 value="e9922300aff663e55ecef7d3fca305cb60a14755b1f980d94039e3c1cab645cc" origin="Generated by Gradle"/>
@@ -18214,6 +18339,11 @@
             <sha256 value="80d1d87fa0a63bff8395ea3910bda80d09f0f583504ddea8ed007bc7a86b4cd4" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-json" version="1.8.0">
+         <artifact name="kotlinx-serialization-json-1.8.0.module">
+            <sha256 value="94afde53c191c3e1e07b9f808aa1777f862bc8a95bc50b46628cd09219d56858" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-json-jvm" version="1.4.1">
          <artifact name="kotlinx-serialization-json-jvm-1.4.1.jar">
             <sha256 value="af604c46737121d4225fdb60ef0e17766a3c94b7c1c9ef76b4e3a5c7733d557e" origin="Generated by Gradle"/>
@@ -18230,6 +18360,14 @@
             <sha256 value="227a2a9ad38c010b107bc8058cd615177da5aaa86db37f7d58d49d9c9b7f97d0" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.jetbrains.kotlinx" name="kotlinx-serialization-json-jvm" version="1.8.0">
+         <artifact name="kotlinx-serialization-json-jvm-1.8.0.jar">
+            <sha256 value="7b7c445880cef94dc464f4733da1b33b94bee78805041ea08ae06e8507e4620e" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="kotlinx-serialization-json-jvm-1.8.0.module">
+            <sha256 value="97e35997fea9ad963ade5bf4c03928fe53974b826521d4b03fbfb3cab0208aaa" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jlleitschuh.gradle" name="ktlint-gradle" version="12.1.1">
          <artifact name="ktlint-gradle-12.1.1.jar">
             <sha256 value="f314e27ae92dda118e4f0b5eb9f2d867286ed0ccb72090a0a53b5c9f15c032ef" origin="Generated by Gradle"/>
@@ -18285,6 +18423,14 @@
             <sha256 value="d307ca77a54e18ac1ef1aaed4e5bbe014bd2f49f29e1d2f813e47c278283195b" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.junit" name="junit-bom" version="5.10.1">
+         <artifact name="junit-bom-5.10.1.module">
+            <sha256 value="21b0afcfffe2ecb3770f5eb00ae7a19feaee94e771fa3918173850dae78067b7" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="junit-bom-5.10.1.pom">
+            <sha256 value="21c4b0286f4b20069577ff4b20978a85c100ac8a46b6f1c8672fbaab337bc3f2" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.junit" name="junit-bom" version="5.10.2">
          <artifact name="junit-bom-5.10.2.module">
             <sha256 value="de23b114b3e4119a8fe6eb17bed5a3852816698bace67071579d6d927ebb080a" origin="Generated by Gradle"/>
@@ -18293,6 +18439,14 @@
             <sha256 value="169dd904a4b0f6520cffe658cc62292bfe9f3c14a989fa92120724cde43a9968" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.junit" name="junit-bom" version="5.10.3">
+         <artifact name="junit-bom-5.10.3.module">
+            <sha256 value="aa7940c9d68312e39d89a65285aa9af45f14d8f434d850ee8d93db6a56d167bb" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="junit-bom-5.10.3.pom">
+            <sha256 value="10937d44c425984cb8739225d34712e1a3145641ca93ac3f7ef186fa25f6babc" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.junit" name="junit-bom" version="5.11.0">
          <artifact name="junit-bom-5.11.0.module">
             <sha256 value="f7edbe67f22042708c410abc547408e5c476f409f556236a1179221274a2ed2d" origin="Generated by Gradle"/>