#

# Licensed to the Apache Software Foundation (ASF) under one

# or more contributor license agreements. See the NOTICE file

# distributed with this work for additional information

# regarding copyright ownership. The ASF licenses this file

# to you under the Apache License, Version 2.0 (the

# "License"); you may not use this file except in compliance

# with the License. You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing,

# software distributed under the License is distributed on an

# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

# KIND, either express or implied. See the License for the

# specific language governing permissions and limitations

# under the License.

#

header:

license:

spdx-id: Apache-2.0

copyright-owner: Apache Software Foundation

paths-ignore:

- '.github/ISSUE_TEMPLATE'

- '.github/PULL_REQUEST_TEMPLATE'

- '**/.gitignore'

- '**/*.md'

- '**/*.json'

- '**/*.txt'

- '**/*.lock'

- '**/*.svg'

- '**/*.ico'

- '**/*.png'

- '**/*.jpg'

- '**/*.webp'

- '**/*.woff'

- '**/*.woff2'

- 'LICENSE'

- 'NOTICE'

- 'HEADER'

- '**/dist/**'

- '**/node_modules/**'

# Release scratch dirs: release.sh / release-finalize.sh clone + stage

# the repo here. The check must not recurse into that nested copy (its

# paths don't match the repo-root-relative ignores below, e.g. .claude/**).

- '**/.release-work/**'

- '**/.finalize-work/**'

- 'docs/**'

# Agent / dev tooling, not shippable source — skill configs (e.g.

# local-boot's horizon.*.yaml) carry no ASF header.

- '.claude/**'

- 'pnpm-lock.yaml'

- '.browserslistrc'

- '.prettierrc'

- '.eslintrc*'

- '.editorconfig'

- 'src/types/auto-imports.d.ts'

- 'src/types/components.d.ts'

- 'public/**'

# LICENSE.tpl / NOTICE.tpl in dist-material/release-docs/ render the

# binary tarball's LICENSE / NOTICE (scripts/collect-dist-licenses.mjs).

# Their contents ARE the Apache 2.0 license text and the ASF notice

# text — an extra license-header comment would bleed into the output.

- 'dist-material/release-docs/**/*.tpl'

comment: on-failure

dependency:

files:

- apps/ui/package.json

- apps/bff/package.json

- packages/api-client/package.json

- packages/design-tokens/package.json

- packages/templates/package.json

excludes:

- name: '@skywalking-horizon-ui/*' # Self workspace packages

recursive: true

# Human-asserted licenses for bundled deps whose package.json omits or

# mis-declares `license`. This is skywalking-eyes' native unknown-license

# mechanism; it is ALSO consumed by scripts/collect-dist-licenses.mjs when

# it builds the binary tarball's LICENSE. Each entry MUST be verified

# against the package's own LICENSE/COPYING file (reproduced under

# dist/licenses/) before being added.

licenses:

- name: vue-grid-layout

version: 3.0.0-beta1

license: MIT # ships an MIT LICENSE file; package.json omits `license`

- name: '@pmndrs/pointer-events'

license: MIT # ships a verbatim MIT LICENSE file; package.json declares the non-SPDX "SEE LICENSE IN LICENSE"