provenant-cli 0.2.5

Fast Rust scanner for licenses, copyrights, package metadata, SBOMs, and provenance data.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

// SPDX-FileCopyrightText: Provenant contributors
// SPDX-License-Identifier: Apache-2.0

use serde::{Deserialize, Serialize};

use crate::license_detection::models::{LoadedLicense, LoadedRule};
use crate::models::LicenseIndexProvenance;

pub const SCHEMA_VERSION: u32 = 6;

#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
pub struct EmbeddedArtifactMetadata {
    pub spdx_license_list_version: String,
    pub license_index_provenance: LicenseIndexProvenance,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct EmbeddedLoaderSnapshot {
    // WARNING: `schema_version` and `metadata` MUST stay the first two fields,
    // in this order. The warm-startup fast path in
    // `embedded::index::load_embedded_artifact_metadata_from_bytes` postcard-
    // decodes only this `{schema_version, metadata}` prefix (via
    // `EmbeddedArtifactMetadataPrefix`) without reading `rules`/`licenses`.
    // Inserting or reordering a field before/between these two silently breaks
    // that prefix decode.
    pub schema_version: u32,
    pub metadata: EmbeddedArtifactMetadata,
    pub rules: Vec<LoadedRule>,
    pub licenses: Vec<LoadedLicense>,
}