model: Introduce a new copyright holder field to data model

In German law, the author and the copyright holder can be two seperate
legal entities and therefore also need to be treated separately.

Introduce a new copyright holder field that is now the primary source
for copyright holder information. Authors are still only used as
copyright holders if the `addAuthorsToCopyrights` option is enabled.

For now, all package manager implementations set empty copyright
holders. Filling the copyright holder field is left as an exercise for
future actions. Right now, the only way to add copyright holders is via
curations.

This change resolves #4519.

Signed-off-by: Rainer Bieniek <extern.rainer.bieniek@porsche.de>

Author: porsche-rbieniek

analyzer/src/funTest/kotlin/managers/SpdxDocumentFileFunTest.kt

@@ -104,6 +104,7 @@ class SpdxDocumentFileFunTest : WordSpec({
                     cpe = "cpe:2.3:a:http:curl:7.70.0:*:*:*:*:*:*:*",
                     definitionFilePath = vcsDir.getPathToRoot(curlPackageFile),
                     authors = sortedSetOf("Daniel Stenberg (daniel@haxx.se)"),
+                    copyrightHolders = sortedSetOf(),
                     declaredLicenses = sortedSetOf("curl"),
                     vcs = VcsInfo(
                         type = VcsType.GIT,
@@ -125,6 +126,7 @@ class SpdxDocumentFileFunTest : WordSpec({
                     cpe = "cpe:2.3:a:a-name:openssl:1.1.1g:*:*:*:*:*:*:*",
                     definitionFilePath = vcsDir.getPathToRoot(opensslPackageFile),
                     authors = sortedSetOf("OpenSSL Development Team"),
+                    copyrightHolders = sortedSetOf(),
                     declaredLicenses = sortedSetOf("Apache-2.0"),
                     vcs = VcsInfo(
                         type = VcsType.GIT,
@@ -146,6 +148,7 @@ class SpdxDocumentFileFunTest : WordSpec({
                     cpe = "cpe:/a:compress:zlib:1.2.11:::en-us",
                     definitionFilePath = vcsDir.getPathToRoot(zlibPackageFile),
                     authors = sortedSetOf("Jean-loup Gailly", "Mark Adler"),
+                    copyrightHolders = sortedSetOf(),
                     declaredLicenses = sortedSetOf("Zlib"),
                     vcs = VcsInfo(
                         type = VcsType.GIT,

analyzer/src/main/kotlin/managers/Bower.kt

@@ -117,6 +117,7 @@ class Bower(
             Package(
                 id = parsePackageId(node),
                 authors = parseAuthors(node),
+                copyrightHolders = sortedSetOf(),
                 declaredLicenses = parseDeclaredLicenses(node),
                 description = node["pkgMeta"]["description"].textValueOrEmpty(),
                 homepageUrl = node["pkgMeta"]["homepage"].textValueOrEmpty(),
@@ -252,6 +253,7 @@ class Bower(
                 id = projectPackage.id,
                 definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                 authors = projectPackage.authors,
+                copyrightHolders = sortedSetOf(),
                 declaredLicenses = projectPackage.declaredLicenses,
                 vcs = projectPackage.vcs,
                 vcsProcessed = processProjectVcs(workingDir, projectPackage.vcs, projectPackage.homepageUrl),

analyzer/src/main/kotlin/managers/Bundler.kt

@@ -165,6 +165,7 @@ class Bundler(
                 id = projectId,
                 definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                 authors = authors,
+                copyrightHolders = sortedSetOf(),
                 declaredLicenses = declaredLicenses.toSortedSet(),
                 vcs = VcsInfo.EMPTY,
                 vcsProcessed = processProjectVcs(workingDir, VcsInfo.EMPTY, homepageUrl),
@@ -281,6 +282,7 @@ class Bundler(
         return Package(
             id = gemId,
             authors = gemSpec.authors,
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = gemSpec.declaredLicenses,
             description = gemSpec.description,
             homepageUrl = gemSpec.homepageUrl,

analyzer/src/main/kotlin/managers/Cargo.kt

@@ -220,6 +220,7 @@ class Cargo(
             id = projectPkg.id,
             definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
             authors = authors,
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = projectPkg.declaredLicenses,
             declaredLicensesProcessed = processDeclaredLicenses(projectPkg.declaredLicenses),
             vcs = projectPkg.vcs,
@@ -275,6 +276,7 @@ private fun parsePackage(node: JsonNode, hashes: Map<String, String>): Package {
     return Package(
         id = parsePackageId(node),
         authors = parseAuthors(node["authors"]),
+        copyrightHolders = sortedSetOf(),
         declaredLicenses = declaredLicenses,
         declaredLicensesProcessed = declaredLicensesProcessed,
         description = node["description"].textValueOrEmpty(),

analyzer/src/main/kotlin/managers/Carthage.kt

@@ -82,6 +82,7 @@ class Carthage(
                     ),
                     definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                     authors = sortedSetOf(),
+                    copyrightHolders = sortedSetOf(),
                     declaredLicenses = sortedSetOf(),
                     vcs = VcsInfo.EMPTY,
                     vcsProcessed = processProjectVcs(workingDir, VcsInfo.EMPTY),
@@ -190,6 +191,7 @@ class Carthage(
                 version = revision
             ),
             authors = sortedSetOf(),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = sortedSetOf(),
             description = "",
             homepageUrl = projectUrl.removeSuffix(".git"),
@@ -214,6 +216,7 @@ class Carthage(
                 version = revision
             ),
             authors = sortedSetOf(),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = sortedSetOf(),
             description = "",
             homepageUrl = "",
@@ -232,6 +235,7 @@ class Carthage(
                 version = revision
             ),
             authors = sortedSetOf(),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = sortedSetOf(),
             description = "",
             homepageUrl = "",

analyzer/src/main/kotlin/managers/CocoaPods.kt

@@ -159,6 +159,7 @@ class CocoaPods(
                 ),
                 definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                 authors = sortedSetOf(),
+                copyrightHolders = sortedSetOf(),
                 declaredLicenses = sortedSetOf(),
                 vcs = VcsInfo.EMPTY,
                 vcsProcessed = processProjectVcs(workingDir),
@@ -189,6 +190,7 @@ class CocoaPods(
         return Package(
             id = id,
             authors = sortedSetOf(),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = podspec.license.takeUnless { it.isEmpty() }?.let { sortedSetOf(it) } ?: sortedSetOf(),
             description = podspec.summary,
             homepageUrl = podspec.homepage,

analyzer/src/main/kotlin/managers/Composer.kt

@@ -236,6 +236,7 @@ class Composer(
             ),
             definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
             authors = parseAuthors(json),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = parseDeclaredLicenses(json),
             vcs = vcs,
             vcsProcessed = processProjectVcs(definitionFile.parentFile, vcs, homepageUrl),
@@ -268,6 +269,7 @@ class Composer(
                         version = version
                     ),
                     authors = parseAuthors(pkgInfo),
+                    copyrightHolders = sortedSetOf(),
                     declaredLicenses = parseDeclaredLicenses(pkgInfo),
                     description = pkgInfo["description"].textValueOrEmpty(),
                     homepageUrl = homepageUrl,

analyzer/src/main/kotlin/managers/Conan.kt

@@ -171,6 +171,7 @@ class Conan(
                         id = projectPackage.id,
                         definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                         authors = projectPackage.authors,
+                        copyrightHolders = sortedSetOf(),
                         declaredLicenses = projectPackage.declaredLicenses,
                         vcs = projectPackage.vcs,
                         vcsProcessed = processProjectVcs(
@@ -290,6 +291,7 @@ class Conan(
         return Package(
             id = id,
             authors = parseAuthors(node),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = parseDeclaredLicenses(node),
             description = parsePackageField(node, workingDir, "description"),
             homepageUrl = homepageUrl,
@@ -429,6 +431,7 @@ class Conan(
                 version = inspectField(definitionFile.name, workingDir, "version")
             ),
             authors = parseAuthors(node),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = parseDeclaredLicenses(node),
             description = inspectField(definitionFile.name, workingDir, "description"),
             homepageUrl = node["homepage"].textValueOrEmpty(),
@@ -449,6 +452,7 @@ class Conan(
                 version = ""
             ),
             authors = parseAuthors(node),
+            copyrightHolders = sortedSetOf(),
             declaredLicenses = parseDeclaredLicenses(node),
             description = "",
             homepageUrl = node["homepage"].textValueOrEmpty(),

analyzer/src/main/kotlin/managers/GoDep.kt

@@ -136,6 +136,7 @@ class GoDep(
             val pkg = Package(
                 id = Identifier("Go", "", name, normalizeModuleVersion(version)),
                 authors = sortedSetOf(),
+                copyrightHolders = sortedSetOf(),
                 declaredLicenses = sortedSetOf(),
                 description = "",
                 homepageUrl = "",
@@ -175,6 +176,7 @@ class GoDep(
                     ),
                     definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                     authors = sortedSetOf(),
+                    copyrightHolders = sortedSetOf(),
                     declaredLicenses = sortedSetOf(),
                     vcs = VcsInfo.EMPTY,
                     vcsProcessed = projectVcs,

analyzer/src/main/kotlin/managers/GoMod.kt

@@ -133,6 +133,7 @@ class GoMod(
                         ),
                         definitionFilePath = VersionControlSystem.getPathInfo(definitionFile).path,
                         authors = sortedSetOf(), // Go mod doesn't support author information.
+                        copyrightHolders = sortedSetOf(), // Go mod doesn't support copyright holders.
                         declaredLicenses = sortedSetOf(), // Go mod doesn't support declared licenses.
                         vcs = projectVcs,
                         vcsProcessed = projectVcs,
@@ -284,6 +285,7 @@ class GoMod(
         return Package(
             id = toId(),
             authors = sortedSetOf(), // Go mod doesn't support author information.
+            copyrightHolders = sortedSetOf(), // Go mod doesn't support copyright holders
             declaredLicenses = sortedSetOf(), // Go mod doesn't support declared licenses.
             description = "",
             homepageUrl = "",