diff mbox series

[v3,09/10] package/ripgrep: add legal-info for dependencies

Message ID 20200220160119.3407-9-patrick.havelange@essensium.com
State Superseded
Headers show
Series [v3,01/10] package/pkg-cargo.mk: Introduce the cargo package infrastructure. | expand

Commit Message

Patrick Havelange Feb. 20, 2020, 4:01 p.m. UTC
As the dependencies are now vendored in the tarball, we can
extract them easily. Added a helper script to list them.
Updated the .hash & .mk files with those new licenses.

Signed-off-by: Patrick Havelange <patrick.havelange@essensium.com>
---
 package/ripgrep/find_vendor_licenses.sh |   6 +
 package/ripgrep/ripgrep.hash            | 167 +++++++++++++++++++++++
 package/ripgrep/ripgrep.mk              |   4 +-
 package/ripgrep/vendor.inc              | 169 ++++++++++++++++++++++++
 4 files changed, 345 insertions(+), 1 deletion(-)
 create mode 100755 package/ripgrep/find_vendor_licenses.sh
 create mode 100644 package/ripgrep/vendor.inc

Comments

Thomas Petazzoni Aug. 26, 2020, 7:26 p.m. UTC | #1
Hello all,

On Thu, 20 Feb 2020 17:01:18 +0100
Patrick Havelange <patrick.havelange@essensium.com> wrote:

> As the dependencies are now vendored in the tarball, we can
> extract them easily. Added a helper script to list them.
> Updated the .hash & .mk files with those new licenses.
> 
> Signed-off-by: Patrick Havelange <patrick.havelange@essensium.com>
> ---
>  package/ripgrep/find_vendor_licenses.sh |   6 +
>  package/ripgrep/ripgrep.hash            | 167 +++++++++++++++++++++++
>  package/ripgrep/ripgrep.mk              |   4 +-
>  package/ripgrep/vendor.inc              | 169 ++++++++++++++++++++++++
>  4 files changed, 345 insertions(+), 1 deletion(-)

At the latest virtual Buildroot Developers Meeting, Yann and I talked
about this. I'll paste the complete IRC conversation below. In short,
Yann wanted some way of dynamically grabbing the legal information at
runtime, but our discussion made it clear (I believe) that this was not
possible. Yann agreed that a static description of the licenses and
licenses files (like you did) was the only option. However, Yann didn't
like that the vendor licenses are described in a separate vendor.inc
file. I personally don't mind too much, as we already do that for the
qt5webengine package. Overall, I believe this aspect is fairly minor
compared to the concerns about the download backend.

Here is the unedited IRC conversation:

[15:32:56] <y_morin> kos_tom: For cargo: I do not like the vendor.inc stuff at all...
[15:33:05] <kos_tom> y_morin: do we have a better proposal ?
[15:33:33] <y_morin> kos_tom: Yes: handle it in the cargo infra
[15:33:46] <y_morin> I.e.: do not let the packages do the inclusion by themselves.
[15:33:53] <kos_tom> how would you do that? we don't support "dynamic legal-info" currently
[15:35:29] <y_morin> And in the infra:  include $(pkgdir)/vendor.inc     $(1)_LICENSE += , $($(1)_VENDOR_LICENSE)   $(1)_LICENSE_FILES += $($(1)_VENDOR_LICENSE_FILES)
[15:36:05] <y_morin> kos_tom: The trick with the license list, is that the 'space-comma' is properly replaced by a comma in the legal-infra already
[15:36:25] <kos_tom> mooh, https://github.com/facebook/rocksdb/commit/085e4dcf8173e91311fbf9037d8bc9393f254c6f exists, but "git show 085e4dcf8173e91311fbf9037d8bc9393f254c6f" in this repo says "no such commit"
[15:36:54] <kos_tom> y_morin: but the value of this VENDOR_LICENSE variable would only be known after the package has been downloaded
[15:36:56] <y_morin> (*if* we can get the license list of the vensored stuff; having the license fiels would already be nice enough)
[15:37:04] <kos_tom> y_morin: how does the infra fills it in ?
[15:37:07] <y_morin> Ah, right/
[15:37:24] <kos_tom> that's what I called "support for dynamic legal-info"
[15:37:39] <y_morin> No, no, the infra does not fill in the variables, they are prepared as is.
[15:37:45] <y_morin> ... as is in the series.
[15:37:52] <kos_tom> aah, github says "This commit does not belong to any branch on this repository."
[15:38:04] <y_morin> Except it is not the package ./mk that does the include and aggregartion, but the cvargo infra
[15:38:09] <kos_tom> y_morin: ah, so it doesn't change much compared to the series
[15:38:20] <y_morin> No, not much.
[15:38:37] <y_morin> kos_tom: Except the series as is does not even catter for the list of licenses either.
[15:39:21] <y_morin> kos_tom: But:
[15:39:42] <y_morin> 1) I am not too fond of the vendor.inc to begin with; the info should be in the .mk
[15:40:00] <y_morin> 2) *if* we want to go with the vendor.inc, then let's handle it in the cargo-infra
[15:40:17] <y_morin> But TBH, I would really prefer option 1.
[15:40:40] <y_morin> There is no reason to single out cargo from other infras.
[15:41:36] <kos_tom> y_morin: we do have something similar as the vendor.inc already today
[15:41:56] <y_morin> Where?
[15:42:02] <kos_tom> enjoy package/qt5/qt5webengine/chromium-latest.inc
[15:42:23] <y_morin> Oh noes... :-(
[15:43:18] <y_morin> kos_tom: OK, so *if* we want to go that route, let's not let packages handle it, but let's handle it in the infra, and in pkg-generic at that.
[15:44:05] <kos_tom> hm, maybe this is something we should do long-term, but I'm not sure it's really something we should promote at the pkg-generic level today
[15:44:18] <kos_tom> we're only talking about a few cargo-related packages for now
[15:46:05] <y_morin> kos_tom: https://pastebin.com/AQfyKaSL
[15:46:18] <y_morin> I think it would not be much more complex that that.
[15:46:46] <kos_tom> doesn't account for per-version subdirectories
[15:47:04] <kos_tom> for qt5webengine, we use two have .inc files :-)
[15:47:09] <y_morin> Yes, yes... You are nit-picking. ;-)
[15:47:26] <kos_tom> to me, that is a minor detail in the whole story
[15:47:37] <kos_tom> the question is: do we accept to handle legal-info for cargo packages this way ?
[15:48:05] <y_morin> To me: no.
[15:48:21] <y_morin> I'd like chromuium stays the esception.
[15:49:19] <y_morin> I don;t think this is a problem that the .mk of cargo packages is just 99% legal-stuff. That's just the sad story there is to it.
[15:49:42] <y_morin> Also, I don't like that parts of the legal-info is in the .mk, and part in the vendor.inc.
[15:50:25] <y_morin> Unless we decide that we want to move the legal-info to is own file, like foo.mk foo.hash and now foo.legal
[15:50:45] <y_morin> But meh, I would keep everything in a single file, please.
[15:50:47] <kos_tom> the idea for qt5webengine is also that the .inc file is kind of auto-generated
[15:51:07] <y_morin> Havinf the legal-info in a side file means it fille bit-rot there ebecause no one will look/update it.
[15:51:37] <y_morin> kos_tom: So what? The legalinfo in scan-pypi or scan-cpan is also autogenerated the first time. Tyhen it is manually updated..
[15:51:58] <kos_tom> y_morin: no, it is again updated with scanpypi or scancpan
[15:52:05] <kos_tom> scanpypi and scancpan are not one-time scripts
[15:52:18] <Jacmet> kos_tom: yeah, I couldn't backport the gnutls security bump before we had a fix for uclibc
[15:53:34] <Kubu> kos_tom: ok, I'm able to build bat
[15:53:40] <kos_tom> Kubu: ah :)
[15:53:43] <Kubu> even with ARM toolchain
[15:58:44] <y_morin> kos_tom: So, even the generated packages are properly updated, so even that is not an excuse ti have the licensing info outside the .mk
[15:58:58] <y_morin> (sorry, I had a sigfood from the nano-tigers...)
[16:00:33] <y_morin> Kubu: When you're done with cargo/rust, mind diving back into elf2flt:  https://patchwork.ozlabs.org/project/buildroot/patch/20200726094338.1276868-1-fontaine.fabrice@gmail.com/  ? ;-)
[16:01:27] <Kubu> y_morin: well, there is no much change in this version compared to what we have currently
[16:02:00] <kos_tom> y_morin: again, to me inside/outside the .mk is a small detail
[16:02:21] <kos_tom> Lightsword: have you looked at the Lua 5.4 series from François Perrad ?
[16:02:22] <y_morin> kos_tom: So I am not sure I understood your question...
[16:02:23] <Kubu> it's just about sync with with the tag added recently
[16:02:52] <kos_tom> y_morin: are we OK with handling legal-info like this, i.e it's quite manual. I anyway don't really see any other option.
[16:03:36] <y_morin> kos_tom: Still, not sure to understand... :-/
[16:04:30] <y_morin> kos_tom: In fact, we *could* very well have the list established at runtime.
[16:04:31] <kos_tom> y_morin: well, aside the location of the legal details, are we OK with the way it's done ?
[16:04:59] <y_morin> Since the lists are not used to generate Makefile code, they are only evaluated in shell context
[16:05:20] <kos_tom> ooh, but
[16:05:22] <y_morin> so we could do:  FOO_LICENSE = `some script to extract the list`
[16:05:23] <kos_tom> we already have BR2_PACKAGE_LUAINTERPRETER_ABI_VERSION
[16:05:33] <kos_tom> which contains 5.1 for LuaJIT/Lua5.1 and 5.3 for Lua 5.3
[16:06:03] <y_morin> and FOO_LICENSE_FILES = `some script to extract the list of files`
[16:06:04] <kos_tom> y_morin: but then we could only evaluate the FOO_LICENSE variable after the download has taken place
[16:06:32] <y_morin> kos_tom: No, because the variable are evaluated when the corresponding make rule is generated.
[16:07:02] <y_morin> which is another rule than foo-legal-info
[16:07:32] <y_morin> So, at the time foo-lkegal-info is "started/run", the foo-extract and foo-patch are finished
[16:08:07] <y_morin> .. it should work (famous last words)
[16:08:23] <kos_tom> y_morin: well, if I do "make FOO_LICENSE printvars"
[16:08:47] <y_morin> That won;t work if the patckage is not extractd/patched, no. indeed.
[16:09:09] <y_morin> So that wouild bust show-info too
[16:09:12] <y_morin> So not good.
[16:10:01] <y_morin> We indeed do need a static list of licenses and files

Best regards,

Thomas
diff mbox series

Patch

diff --git a/package/ripgrep/find_vendor_licenses.sh b/package/ripgrep/find_vendor_licenses.sh
new file mode 100755
index 0000000000..fd8638e399
--- /dev/null
+++ b/package/ripgrep/find_vendor_licenses.sh
@@ -0,0 +1,6 @@ 
+#!/bin/sh
+# to run from the extracted final sources
+find VENDOR/ -type f \
+    \( -iname '*license*' -o -iname 'licence*' -o -iname 'copying*' -o -iname 'copyright*' \) \
+    -a -not -name '*.a' | \
+    sort
diff --git a/package/ripgrep/ripgrep.hash b/package/ripgrep/ripgrep.hash
index 1e70cbae5a..cad9fdc865 100644
--- a/package/ripgrep/ripgrep.hash
+++ b/package/ripgrep/ripgrep.hash
@@ -1,3 +1,170 @@ 
 # Locally calculated
 sha256 c02fe3077c95872175b098d002f872a619195436569a7dff443bbb605bc27474 ripgrep-11.0.1.tar.gz
 sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f LICENSE-MIT
+# Locally calculated with:
+# for i in $(find_vendor_licenses.sh) ; do echo -n "sha256 " ; sha256sum $i ; done | sort --key=3
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/aho-corasick/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/aho-corasick/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/aho-corasick/UNLICENSE
+sha256 f3f8d32084848316048c5a1e125a3c5003eb32145a5f5f2a0d5586377324f9ba  VENDOR/atty/LICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/autocfg/LICENSE-APACHE
+sha256 27995d58ad5c1145c1a8cd86244ce844886958a35eb2b78c6b772748669999ac  VENDOR/autocfg/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/base64/LICENSE-APACHE
+sha256 0dd882e53de11566d50f8e8e2d5a651bcf3fabee4987d70f306233cf39094ba7  VENDOR/base64/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/bitflags/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/bitflags/LICENSE-MIT
+sha256 13361f93b3db60ddb43f8fdc97ba469461019bbf7589f6bde833eb3d995d2497  VENDOR/bstr/COPYING
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/bstr/LICENSE-APACHE
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/bstr/LICENSE-MIT
+sha256 b40930bbcf80744c86c46a12bc9da056641d722716c378f5659b9e555ef833e1  VENDOR/bytecount/LICENSE.Apache2
+sha256 a5dea80c1f383cb5f80a6bb0da5e55a2beb9f24adb123ce6300af2cbaaa3bf65  VENDOR/bytecount/LICENSE.MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/byteorder/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/byteorder/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/byteorder/UNLICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/cc/LICENSE-APACHE
+sha256 378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397  VENDOR/cc/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/cfg-if/LICENSE-APACHE
+sha256 378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397  VENDOR/cfg-if/LICENSE-MIT
+sha256 6725d1437fc6c77301f2ff0e7d52914cf4f9509213e1078dc77d9356dbe6eac5  VENDOR/clap/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/crossbeam-channel/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/crossbeam-channel/LICENSE-MIT
+sha256 924a49392dc8304def57586be4ebd69aaf51e16fd245b55b4b69ad2cce6b715a  VENDOR/crossbeam-channel/LICENSE-THIRD-PARTY
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/crossbeam-utils/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/crossbeam-utils/LICENSE-MIT
+sha256 8b98376eb373dcf81950474efe34b5576a8171460dff500cc58a1ed8d160cd57  VENDOR/encoding_rs/COPYRIGHT
+sha256 13361f93b3db60ddb43f8fdc97ba469461019bbf7589f6bde833eb3d995d2497  VENDOR/encoding_rs_io/COPYING
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/encoding_rs_io/LICENSE-APACHE
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/encoding_rs_io/LICENSE-MIT
+sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30  VENDOR/encoding_rs/LICENSE-APACHE
+sha256 f2ad48641d9c997d9ae3b95d93d1cd6e1ab12ab4c44de89937c7bfabbd076a4a  VENDOR/encoding_rs/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/fnv/LICENSE-APACHE
+sha256 65fdb6c76cd61612070c066eec9ecdb30ee74fb27859d0d9af58b9f499fd0c3e  VENDOR/fnv/LICENSE-MIT
+sha256 03b114f53e6587a398931762ee11e2395bfdba252a329940e2c8c9e81813845b  VENDOR/fuchsia-cprng/LICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/glob/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/glob/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/itoa/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/itoa/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/lazy_static/LICENSE-APACHE
+sha256 0621878e61f0d0fda054bcbe02df75192c28bde1ecc8289cbd86aeba2dd72720  VENDOR/lazy_static/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/libc/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/libc/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/log/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/log/LICENSE-MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/memchr/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/memchr/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/memchr/UNLICENSE
+sha256 04ea4849dba9dcae07113850c6f1b1a69052c625210639914eee352023f750ad  VENDOR/memmap/LICENSE-APACHE
+sha256 bd1d8f06a6ce1f7645991e347b95864b970eed43624305eb4bb78c09aef8692d  VENDOR/memmap/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/num_cpus/LICENSE-APACHE
+sha256 0593d22d122d4bfec6407115e3907546312976f75473417aaa4c57ecd2095ae6  VENDOR/num_cpus/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/packed_simd/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/packed_simd/LICENSE-MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/pcre2/COPYING
+sha256 cb3c929a05e6cbc9de9ab06a4c57eeb60ca8c724bef6c138c87d3a577e27aa14  VENDOR/pcre2/LICENSE-MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/pcre2-sys/COPYING
+sha256 cb3c929a05e6cbc9de9ab06a4c57eeb60ca8c724bef6c138c87d3a577e27aa14  VENDOR/pcre2-sys/LICENSE-MIT
+sha256 46cde7dc11e64c78d650b4851b88f6704b4665ff60f22a1caf68ceb15e217e5b  VENDOR/pcre2-sys/pcre2/cmake/COPYING-CMAKE-SCRIPTS
+sha256 99272c55f3dcfa07a8a7e15a5c1a33096e4727de74241d65fa049fccfdd59507  VENDOR/pcre2-sys/pcre2/COPYING
+sha256 c4a8b89cd38d6a7501d5b11a472fa15e71a051b66d6331c6cda364101389d6ee  VENDOR/pcre2-sys/pcre2/LICENCE
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/pcre2-sys/UNLICENSE
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/pcre2/UNLICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/pkg-config/LICENSE-APACHE
+sha256 378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397  VENDOR/pkg-config/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/proc-macro2/LICENSE-APACHE
+sha256 378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397  VENDOR/proc-macro2/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/quote/LICENSE-APACHE
+sha256 c9a75f18b9ab2927829a208fc6aa2cf4e63b8420887ba29cdb265d6619ae82d5  VENDOR/quote/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_chacha/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_chacha/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_chacha/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand/COPYRIGHT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_core-0.3.1/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_core-0.3.1/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_core-0.3.1/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_core/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_core/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_core/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_hc/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_hc/LICENSE-APACHE
+sha256 a771e4354f6b3ad4c92da1a5c9a239b6c291527db869632ecea4f20e24ca1135  VENDOR/rand_hc/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_isaac/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_isaac/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_isaac/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_jitter/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_jitter/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_jitter/LICENSE-MIT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_os/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_os/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_os/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_pcg/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_pcg/LICENSE-APACHE
+sha256 2234e3cefee876aeb686ad89e978bdb07bf118a1186ab1cf161bcdf69d4b4f57  VENDOR/rand_pcg/LICENSE-MIT
+sha256 90eb64f0279b0d9432accfa6023ff803bc4965212383697eee27a0f426d5f8d5  VENDOR/rand_xorshift/COPYRIGHT
+sha256 aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf  VENDOR/rand_xorshift/LICENSE-APACHE
+sha256 209fbbe0ad52d9235e37badf9cadfe4dbdc87203179c0899e738b39ade42177b  VENDOR/rand_xorshift/LICENSE-MIT
+sha256 00d7b0c8bf95ea93162fccc84da96b906b15add708eade04f7ee6141f7b53141  VENDOR/rdrand/LICENSE
+sha256 efcfee7981ff72431fffb06925cad00a23dce079ed4354f61030ad5abdb78829  VENDOR/redox_syscall/LICENSE
+sha256 cb46b697c3fd9d27d7bfe1b1ad48f8a58a284984504c6eb215ae2164538df7cb  VENDOR/redox_termios/LICENSE
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/regex-automata/COPYING
+sha256 58cf078acc03da3e280a938c2bd9943f554fc9b6ced89ad93ba35ca436872899  VENDOR/regex-automata/data/fowler-tests/LICENSE
+sha256 58cf078acc03da3e280a938c2bd9943f554fc9b6ced89ad93ba35ca436872899  VENDOR/regex-automata/data/tests/fowler/LICENSE
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/regex-automata/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/regex-automata/UNLICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/regex/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/regex/LICENSE-MIT
+sha256 58cf078acc03da3e280a938c2bd9943f554fc9b6ced89ad93ba35ca436872899  VENDOR/regex/src/testdata/LICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/regex-syntax/LICENSE-APACHE
+sha256 6485b8ed310d3f0340bf1ad1f47645069ce4069dcc6bb46c7d5c6faf41de1fdb  VENDOR/regex-syntax/LICENSE-MIT
+sha256 74db5baf44a41b1000312c673544b3374e4198af5605c7f9080a402cec42cfa3  VENDOR/regex-syntax/src/unicode_tables/LICENSE-UNICODE
+sha256 c6c8c9dbe29fb4d68d829c7a402f9f6baae3472ecf107cc2a57c75a9a8d1b85c  VENDOR/remove_dir_all/LICENCE-APACHE
+sha256 db264505cb1856383e255c8373da9e5aeadc1cd92b570fcc94fd1fb7d892db78  VENDOR/remove_dir_all/LICENCE-MIT
+sha256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4  VENDOR/ryu/LICENSE-APACHE
+sha256 c9bff75738922193e67fa726fa225535870d2aa1059f91452c411736284ad566  VENDOR/ryu/LICENSE-BOOST
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/same-file/COPYING
+sha256 cb3c929a05e6cbc9de9ab06a4c57eeb60ca8c724bef6c138c87d3a577e27aa14  VENDOR/same-file/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/same-file/UNLICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/serde_derive/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/serde_derive/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/serde_json/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/serde_json/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/serde/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/serde/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/smallvec/LICENSE-APACHE
+sha256 0b28172679e0009b655da42797c03fd163a3379d5cfa67ba1f1655e974a2a1a9  VENDOR/smallvec/LICENSE-MIT
+sha256 1738b51502ae831fb59ffbeb22ebdd90bf17e5c72fe57c00b47552415f133fd8  VENDOR/strsim/LICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/syn/LICENSE-APACHE
+sha256 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3  VENDOR/syn/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/tempfile/LICENSE-APACHE
+sha256 8b427f5bc501764575e52ba4f9d95673cf8f6d80a86d0d06599852e1a9a20a36  VENDOR/tempfile/LICENSE-MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/termcolor/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/termcolor/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/termcolor/UNLICENSE
+sha256 6252f0c8d4a0df9b2dc0c6464cb2489dbe8859b0eb727e19c14e6af1ee432394  VENDOR/termion/LICENSE
+sha256 ce93600c49fbb3e14df32efe752264644f6a2f8e08a735ba981725799e5309ef  VENDOR/textwrap/LICENSE
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/thread_local/LICENSE-APACHE
+sha256 c9a75f18b9ab2927829a208fc6aa2cf4e63b8420887ba29cdb265d6619ae82d5  VENDOR/thread_local/LICENSE-MIT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/ucd-util/LICENSE-APACHE
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/ucd-util/LICENSE-MIT
+sha256 ea8df489e83b7674d5c9d50c320bec3b15d2e2eeb7a3a8879a666d91e5640c16  VENDOR/ucd-util/LICENSE-UNICODE
+sha256 23860c2a7b5d96b21569afedf033469bab9fe14a1b24a35068b8641c578ce24d  VENDOR/unicode-width/COPYRIGHT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/unicode-width/LICENSE-APACHE
+sha256 7b63ecd5f1902af1b63729947373683c32745c16a10e8e6292e2e2dcd7e90ae0  VENDOR/unicode-width/LICENSE-MIT
+sha256 23860c2a7b5d96b21569afedf033469bab9fe14a1b24a35068b8641c578ce24d  VENDOR/unicode-xid/COPYRIGHT
+sha256 a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2  VENDOR/unicode-xid/LICENSE-APACHE
+sha256 7b63ecd5f1902af1b63729947373683c32745c16a10e8e6292e2e2dcd7e90ae0  VENDOR/unicode-xid/LICENSE-MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/utf8-ranges/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/utf8-ranges/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/utf8-ranges/UNLICENSE
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/walkdir/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/walkdir/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/walkdir/UNLICENSE
+sha256 b40930bbcf80744c86c46a12bc9da056641d722716c378f5659b9e555ef833e1  VENDOR/winapi/LICENSE-APACHE
+sha256 ce7bc3499fee93d5022ef430d5e4201e79a6d9154f3974e42f41349f0569e09b  VENDOR/winapi/LICENSE-MIT
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/winapi-util/COPYING
+sha256 cb3c929a05e6cbc9de9ab06a4c57eeb60ca8c724bef6c138c87d3a577e27aa14  VENDOR/winapi-util/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/winapi-util/UNLICENSE
+sha256 01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f  VENDOR/wincolor/COPYING
+sha256 0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f  VENDOR/wincolor/LICENSE-MIT
+sha256 7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c  VENDOR/wincolor/UNLICENSE
diff --git a/package/ripgrep/ripgrep.mk b/package/ripgrep/ripgrep.mk
index 1023b4bad8..3be143e15c 100644
--- a/package/ripgrep/ripgrep.mk
+++ b/package/ripgrep/ripgrep.mk
@@ -4,9 +4,11 @@ 
 #
 ################################################################################
 
+include package/ripgrep/vendor.inc
+
 RIPGREP_VERSION = 11.0.1
 RIPGREP_SITE = $(call github,burntsushi,ripgrep,$(RIPGREP_VERSION))
 RIPGREP_LICENSE = MIT
-RIPGREP_LICENSE_FILES = LICENSE-MIT
+RIPGREP_LICENSE_FILES = LICENSE-MIT $(RIPGREP_VENDOR_LICENSE_FILES)
 
 $(eval $(cargo-package))
diff --git a/package/ripgrep/vendor.inc b/package/ripgrep/vendor.inc
new file mode 100644
index 0000000000..df131ac533
--- /dev/null
+++ b/package/ripgrep/vendor.inc
@@ -0,0 +1,169 @@ 
+# Generated with:
+# (echo "RIPGREP_VENDOR_LICENSE_FILES = \\" ; \
+# 	find_vendor_licenses.sh | sed 's%^\(.*\)$%\t\1 \\%') 
+RIPGREP_VENDOR_LICENSE_FILES = \
+	VENDOR/aho-corasick/COPYING \
+	VENDOR/aho-corasick/LICENSE-MIT \
+	VENDOR/aho-corasick/UNLICENSE \
+	VENDOR/atty/LICENSE \
+	VENDOR/autocfg/LICENSE-APACHE \
+	VENDOR/autocfg/LICENSE-MIT \
+	VENDOR/base64/LICENSE-APACHE \
+	VENDOR/base64/LICENSE-MIT \
+	VENDOR/bitflags/LICENSE-APACHE \
+	VENDOR/bitflags/LICENSE-MIT \
+	VENDOR/bstr/COPYING \
+	VENDOR/bstr/LICENSE-APACHE \
+	VENDOR/bstr/LICENSE-MIT \
+	VENDOR/bytecount/LICENSE.Apache2 \
+	VENDOR/bytecount/LICENSE.MIT \
+	VENDOR/byteorder/COPYING \
+	VENDOR/byteorder/LICENSE-MIT \
+	VENDOR/byteorder/UNLICENSE \
+	VENDOR/cc/LICENSE-APACHE \
+	VENDOR/cc/LICENSE-MIT \
+	VENDOR/cfg-if/LICENSE-APACHE \
+	VENDOR/cfg-if/LICENSE-MIT \
+	VENDOR/clap/LICENSE-MIT \
+	VENDOR/crossbeam-channel/LICENSE-APACHE \
+	VENDOR/crossbeam-channel/LICENSE-MIT \
+	VENDOR/crossbeam-channel/LICENSE-THIRD-PARTY \
+	VENDOR/crossbeam-utils/LICENSE-APACHE \
+	VENDOR/crossbeam-utils/LICENSE-MIT \
+	VENDOR/encoding_rs/COPYRIGHT \
+	VENDOR/encoding_rs_io/COPYING \
+	VENDOR/encoding_rs_io/LICENSE-APACHE \
+	VENDOR/encoding_rs_io/LICENSE-MIT \
+	VENDOR/encoding_rs/LICENSE-APACHE \
+	VENDOR/encoding_rs/LICENSE-MIT \
+	VENDOR/fnv/LICENSE-APACHE \
+	VENDOR/fnv/LICENSE-MIT \
+	VENDOR/fuchsia-cprng/LICENSE \
+	VENDOR/glob/LICENSE-APACHE \
+	VENDOR/glob/LICENSE-MIT \
+	VENDOR/itoa/LICENSE-APACHE \
+	VENDOR/itoa/LICENSE-MIT \
+	VENDOR/lazy_static/LICENSE-APACHE \
+	VENDOR/lazy_static/LICENSE-MIT \
+	VENDOR/libc/LICENSE-APACHE \
+	VENDOR/libc/LICENSE-MIT \
+	VENDOR/log/LICENSE-APACHE \
+	VENDOR/log/LICENSE-MIT \
+	VENDOR/memchr/COPYING \
+	VENDOR/memchr/LICENSE-MIT \
+	VENDOR/memchr/UNLICENSE \
+	VENDOR/memmap/LICENSE-APACHE \
+	VENDOR/memmap/LICENSE-MIT \
+	VENDOR/num_cpus/LICENSE-APACHE \
+	VENDOR/num_cpus/LICENSE-MIT \
+	VENDOR/packed_simd/LICENSE-APACHE \
+	VENDOR/packed_simd/LICENSE-MIT \
+	VENDOR/pcre2/COPYING \
+	VENDOR/pcre2/LICENSE-MIT \
+	VENDOR/pcre2-sys/COPYING \
+	VENDOR/pcre2-sys/LICENSE-MIT \
+	VENDOR/pcre2-sys/pcre2/cmake/COPYING-CMAKE-SCRIPTS \
+	VENDOR/pcre2-sys/pcre2/COPYING \
+	VENDOR/pcre2-sys/pcre2/LICENCE \
+	VENDOR/pcre2-sys/UNLICENSE \
+	VENDOR/pcre2/UNLICENSE \
+	VENDOR/pkg-config/LICENSE-APACHE \
+	VENDOR/pkg-config/LICENSE-MIT \
+	VENDOR/proc-macro2/LICENSE-APACHE \
+	VENDOR/proc-macro2/LICENSE-MIT \
+	VENDOR/quote/LICENSE-APACHE \
+	VENDOR/quote/LICENSE-MIT \
+	VENDOR/rand_chacha/COPYRIGHT \
+	VENDOR/rand_chacha/LICENSE-APACHE \
+	VENDOR/rand_chacha/LICENSE-MIT \
+	VENDOR/rand/COPYRIGHT \
+	VENDOR/rand_core-0.3.1/COPYRIGHT \
+	VENDOR/rand_core-0.3.1/LICENSE-APACHE \
+	VENDOR/rand_core-0.3.1/LICENSE-MIT \
+	VENDOR/rand_core/COPYRIGHT \
+	VENDOR/rand_core/LICENSE-APACHE \
+	VENDOR/rand_core/LICENSE-MIT \
+	VENDOR/rand_hc/COPYRIGHT \
+	VENDOR/rand_hc/LICENSE-APACHE \
+	VENDOR/rand_hc/LICENSE-MIT \
+	VENDOR/rand_isaac/COPYRIGHT \
+	VENDOR/rand_isaac/LICENSE-APACHE \
+	VENDOR/rand_isaac/LICENSE-MIT \
+	VENDOR/rand_jitter/COPYRIGHT \
+	VENDOR/rand_jitter/LICENSE-APACHE \
+	VENDOR/rand_jitter/LICENSE-MIT \
+	VENDOR/rand/LICENSE-APACHE \
+	VENDOR/rand/LICENSE-MIT \
+	VENDOR/rand_os/COPYRIGHT \
+	VENDOR/rand_os/LICENSE-APACHE \
+	VENDOR/rand_os/LICENSE-MIT \
+	VENDOR/rand_pcg/COPYRIGHT \
+	VENDOR/rand_pcg/LICENSE-APACHE \
+	VENDOR/rand_pcg/LICENSE-MIT \
+	VENDOR/rand_xorshift/COPYRIGHT \
+	VENDOR/rand_xorshift/LICENSE-APACHE \
+	VENDOR/rand_xorshift/LICENSE-MIT \
+	VENDOR/rdrand/LICENSE \
+	VENDOR/redox_syscall/LICENSE \
+	VENDOR/redox_termios/LICENSE \
+	VENDOR/regex-automata/COPYING \
+	VENDOR/regex-automata/data/fowler-tests/LICENSE \
+	VENDOR/regex-automata/data/tests/fowler/LICENSE \
+	VENDOR/regex-automata/LICENSE-MIT \
+	VENDOR/regex-automata/UNLICENSE \
+	VENDOR/regex/LICENSE-APACHE \
+	VENDOR/regex/LICENSE-MIT \
+	VENDOR/regex/src/testdata/LICENSE \
+	VENDOR/regex-syntax/LICENSE-APACHE \
+	VENDOR/regex-syntax/LICENSE-MIT \
+	VENDOR/regex-syntax/src/unicode_tables/LICENSE-UNICODE \
+	VENDOR/remove_dir_all/LICENCE-APACHE \
+	VENDOR/remove_dir_all/LICENCE-MIT \
+	VENDOR/ryu/LICENSE-APACHE \
+	VENDOR/ryu/LICENSE-BOOST \
+	VENDOR/same-file/COPYING \
+	VENDOR/same-file/LICENSE-MIT \
+	VENDOR/same-file/UNLICENSE \
+	VENDOR/serde_derive/LICENSE-APACHE \
+	VENDOR/serde_derive/LICENSE-MIT \
+	VENDOR/serde_json/LICENSE-APACHE \
+	VENDOR/serde_json/LICENSE-MIT \
+	VENDOR/serde/LICENSE-APACHE \
+	VENDOR/serde/LICENSE-MIT \
+	VENDOR/smallvec/LICENSE-APACHE \
+	VENDOR/smallvec/LICENSE-MIT \
+	VENDOR/strsim/LICENSE \
+	VENDOR/syn/LICENSE-APACHE \
+	VENDOR/syn/LICENSE-MIT \
+	VENDOR/tempfile/LICENSE-APACHE \
+	VENDOR/tempfile/LICENSE-MIT \
+	VENDOR/termcolor/COPYING \
+	VENDOR/termcolor/LICENSE-MIT \
+	VENDOR/termcolor/UNLICENSE \
+	VENDOR/termion/LICENSE \
+	VENDOR/textwrap/LICENSE \
+	VENDOR/thread_local/LICENSE-APACHE \
+	VENDOR/thread_local/LICENSE-MIT \
+	VENDOR/ucd-util/LICENSE-APACHE \
+	VENDOR/ucd-util/LICENSE-MIT \
+	VENDOR/ucd-util/LICENSE-UNICODE \
+	VENDOR/unicode-width/COPYRIGHT \
+	VENDOR/unicode-width/LICENSE-APACHE \
+	VENDOR/unicode-width/LICENSE-MIT \
+	VENDOR/unicode-xid/COPYRIGHT \
+	VENDOR/unicode-xid/LICENSE-APACHE \
+	VENDOR/unicode-xid/LICENSE-MIT \
+	VENDOR/utf8-ranges/COPYING \
+	VENDOR/utf8-ranges/LICENSE-MIT \
+	VENDOR/utf8-ranges/UNLICENSE \
+	VENDOR/walkdir/COPYING \
+	VENDOR/walkdir/LICENSE-MIT \
+	VENDOR/walkdir/UNLICENSE \
+	VENDOR/winapi/LICENSE-APACHE \
+	VENDOR/winapi/LICENSE-MIT \
+	VENDOR/winapi-util/COPYING \
+	VENDOR/winapi-util/LICENSE-MIT \
+	VENDOR/winapi-util/UNLICENSE \
+	VENDOR/wincolor/COPYING \
+	VENDOR/wincolor/LICENSE-MIT \
+	VENDOR/wincolor/UNLICENSE \