From 321c0214ca38758069cea04a26a0a886be38802a Mon Sep 17 00:00:00 2001
From: Dirk de Visser <github@dirkdevisser.nl>
Date: Fri, 8 Mar 2024 09:42:41 +0100
Subject: [PATCH] feat(lib-license-checker): support npm and yarn cache,
 support excluding packages

Signed-off-by: Dirk de Visser <github@dirkdevisser.nl>
---
 .github/workflows/lib-license-checker.yml | 34 +++++++++++++++++++++--
 1 file changed, 31 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/lib-license-checker.yml b/.github/workflows/lib-license-checker.yml
index d598fc1..935e5fc 100644
--- a/.github/workflows/lib-license-checker.yml
+++ b/.github/workflows/lib-license-checker.yml
@@ -1,5 +1,10 @@
 on:
   workflow_call:
+    inputs:
+      exclude-packages:
+        description: "Semicolon separated list of dependencies to skip."
+        type: string
+        default: ""
 
 jobs:
   check-license:
@@ -13,10 +18,33 @@ jobs:
           persist-credentials: false
 
       - uses: actions/setup-node@v4
+        if: ${{ hashFiles('yarn.lock') != '' }}
         with:
           node-version: 20
+          cache: "yarn"
 
-      - name: "Check"
+      - uses: actions/setup-node@v4
+        if: ${{ hashFiles('package-lock.json') != '' }}
+        with:
+          node-version: 20
+          cache: "npm"
+
+      - uses: actions/setup-node@v4
+        if: ${{ hashFiles('yarn.lock') == '' && hashFiles('package-lock.json') == '' }}
+        with:
+          node-version: 20
+
+      - name: "Install Yarn"
+        if: ${{ hashFiles('yarn.lock') != '' }}
+        run: |
+          yarn
+
+      # Default to NPM if another unsupported package manager is used.
+      - name: "Install NPM"
+        if: ${{ hashFiles('yarn.lock') == '' }}
+        run: |
+          npm install --ignore-scripts
+
+      - name: "Check licenses"
         run: |
-          npm install
-          npx license-checker --production --excludePrivatePackages --summary --onlyAllow="MIT;ISC;Apache-2.0;BSD-2-Clause;BSD-3-Clause;Python-2.0;0BSD;BlueOak-1.0.0;LGPL-3.0-or-later;Custom: https://lightbase.nl;Unlicense;CC-BY-4.0;CC-BY-3.0"
+          npx license-checker -- --production --excludePackages=${{ inputs.exclude-packages }} --excludePrivatePackages --summary --onlyAllow="MIT;ISC;Apache-2.0;BSD-2-Clause;BSD-3-Clause;Python-2.0;0BSD;BlueOak-1.0.0;LGPL-3.0-or-later;Custom: https://lightbase.nl;Unlicense;CC-BY-4.0;CC-BY-3.0"