[ANN] license_finder 2.1.0 released

[Mike Dalessio]

LicenseFinder v2.1.0 has been released!

LicenseFinder works with your package managers to find dependencies,

detect the licenses of the packages in them, compare those licenses

against a user-defined whitelist, and give you an actionable exception

report.

* code: https://github.com/pivotal/LicenseFinder

* support:

  * license...@googlegroups.com

  * https://groups.google.com/forum/#!forum/license-finder

* backlog: https://www.pivotaltracker.com/s/projects/234851

### Supported project types

* Ruby Gems (via `bundler`)

* Python Eggs (via `pip`)

* Node.js (via `npm`)

* Bower

* Nuget (without license discovery)

* Godep

* Go workspace (via a `.envrc` file)

* Go submodules

* Java (via `maven`)

* Java (via `gradle`)

### Experimental project types

* Erlang (via `rebar`)

* Objective-C (+ CocoaPods)

### CHANGELOG

* Features

  * support a `groups` in reports (#210) (Thanks, Jon Wolski!)

  * GoVendor and GoWorkspace define a package management tool, so they won't try to run if you don't have `go` installed

  * PackageManagers are not activated if the underlying package management tool isn't installed

  * detect GO15VENDOREXPERIMENT as evidence of a go workspace project

  * provide path-to-dependency in recursive mode (#193)

  * dedup godep dependencies (#196)

  * add support for MPL2 detection

  * detect .envrc in a parent folder (go workspaces) (#199)

  * miscellaneous nuget support improvements (#200, #201, #202)

  * miscellaneous go support improvements (#203, #204)

  * add support for Golang 1.5 vendoring convention (#207)

  * return the package manager that detected the dependency (#206)

  * Add support for including maven/gradle GroupIds with `--gradle-include-groups`

  * Godep dependencies can display the full commit SHA with `--go-full-version`

  * specific versions of a dependency can be approved (#183, #185). (Thanks, @ipsi!)

  * improved "go workspace" support by looking at git submodules. (Thanks, @jvshahid and @aminjam!)

  * added an "install path" field to the report output. (Thanks, @jvshahid and @aminjam!)

  * Licenses can be blacklisted.  Dependencies which only have licenses in the blacklist will not be approved, even if someone tries.

  * Initial support for the Nuget package manager for .NET projects

  * Experimental support for `godep` projects

  * Experimental support for "golang workspace" projects (with .envrc)

  * Improved support for multi-module `gradle` projects

  * Gradle 2.x support (experimental)

  * Experimental support for "composite" projects (multiple git submodules)

  * Experimental support for "license diffs" between directories

* Bugfixes

  * `rubyzip` is now correctly a runtime dependency

  * deep npm dependency trees no longer result in some packages having no metadata (#211)

  * columns fixed in "recursive mode" (#191)

  * gradle's use of termcaps avoided (#194)