如何自动列出Java + React项目中使用的所有第三方组件？

Question

For legal reasons we are required to provide a list of all open-source components used in our project. It is a commercial java + React project using Gradle, npm and Yarn.

In this context, do you know of any tool or automatic way to extract the list of distributed third-parties used in the java and/or javascript code base? As it is a pretty large code base it would be quite impractical to do it by hand...

My best attempts so far are jdeps for the java code, and yarn list for the javascript part... but they do not really do what I want.

Searching SO I found related questions , but on other languages. I am not quite sure this is the right place to ask, but it seems to me that other people could face the same issue...

Thank you.

Answer 1

You most likely have to configure the license check in the build tools that you are using:

• Gradle has License Gradle Plugin
• NPM has license-checker or few other tools
• Yarn has licenses