Add legal artifact presets, FOSSA-compatible outputs#199

Merged

lelia merged 37 commits into

mainfrom

lelia/add-legal-checks

May 29, 2026

Commits on May 11, 2026

Commits on May 26, 2026

test: add FOSSA reference fixtures and parity harness
Eric Hibbs (flowstate)
committed
fix: emit fossa project.id as <locator>\$<revision>
Eric Hibbs (flowstate)
committed
test: lock fossa analyze top-level keyset invariants
Eric Hibbs (flowstate)
committed
fix: source vulnerability version ranges from Socket field names
Eric Hibbs (flowstate)
committed
fix: emit consistent defaults for FOSSA fields with no Socket source
Eric Hibbs (flowstate)
committed
feat: reshape fossa-sbom.json to 5-key attribution top-level
Eric Hibbs (flowstate)
committed
feat: build FOSSA-shape Dependency entries with attribution text
Eric Hibbs (flowstate)
committed
feat: partition SBOM dependencies into direct and deep
Eric Hibbs (flowstate)
committed
feat: compute SBOM dependencyPaths from topLevelAncestors
Eric Hibbs (flowstate)
committed
fix: write fossa-sbom.json with indent=2 for consistency
Eric Hibbs (flowstate)
committed
test: assert structural parity against real FOSSA fixtures
Eric Hibbs (flowstate)
committed
test: update legacy FOSSA-shape assertions for wrapper parity
Eric Hibbs (flowstate)
committed
docs: document partialFix/completeFix collapse and otherLicenses gap
Eric Hibbs (flowstate)
committed
style: apply ruff --fix to touched files
Eric Hibbs (flowstate)
committed