fix: preserve full license array per packagist version

Signed-off-by: anilb <epipav@gmail.com>

Author: epipav

services/apps/packages_worker/src/packagist/__tests__/normalize.test.ts

@@ -139,10 +139,10 @@ describe('buildPackagistVersionRows', () => {
       publishedAt: '2024-03-01T00:00:00+00:00',
       isLatest: true,
       isPrerelease: false,
-      license: 'MIT',
+      licenses: ['MIT'],
     })
     expect(byNumber['2.9.1'].isLatest).toBe(false)
-    expect(byNumber['1.0.0'].license).toBe('BSD-3-Clause')
+    expect(byNumber['1.0.0'].licenses).toEqual(['BSD-3-Clause'])
     expect(latestVersion).toBe('2.10.0')
     expect(firstReleaseAt).toBe('2020-06-01T00:00:00+00:00')
     expect(latestReleaseAt).toBe('2024-03-01T00:00:00+00:00')

services/apps/packages_worker/src/packagist/normalize.ts

@@ -146,7 +146,7 @@ export function buildPackagistVersionRows(versions: PackagistExpandedVersion[]):
     publishedAt: v.time ?? null,
     isLatest: false, // Will be set below
     isPrerelease: isPackagistPrerelease(v.version_normalized ?? v.version),
-    license: (v.license && v.license.length > 0 ? v.license[0] : null) ?? null,
+    licenses: v.license && v.license.length > 0 ? v.license : null,
   }))
 
   // Find latest: prefer stable over prerelease; within each group use Composer ordering

services/apps/packages_worker/src/packagist/types.ts

@@ -105,7 +105,7 @@ export interface PackagistVersionRow {
   publishedAt: string | null
   isLatest: boolean
   isPrerelease: boolean
-  license: string | null
+  licenses: string[] | null
 }
 
 export interface PackagistDependency {

services/libs/data-access-layer/src/packages/versions.ts

@@ -74,7 +74,9 @@ export interface PackagistVersionInput {
   publishedAt: string | null
   isLatest: boolean
   isPrerelease: boolean
-  license: string | null
+  // Composer allows dual/multi-licensed releases (e.g. ["MIT", "Apache-2.0"]) — the
+  // full array is preserved, unlike the single-SPDX-string npm/pypi license inputs.
+  licenses: string[] | null
 }
 
 export async function upsertPackagistVersions(
@@ -102,7 +104,11 @@ export async function upsertPackagistVersions(
        )
        SELECT $(packageId)::bigint, 'packagist', p.namespace, p.name, v.num,
               v.pub::timestamptz, v.latest, v.pre,
-              CASE WHEN v.lic IS NULL THEN NULL::text[] ELSE ARRAY[v.lic] END,
+              -- licenses travels as one JSON-encoded array per row (unnest can't carry a
+              -- ragged array-of-arrays alongside scalar columns), decoded back here.
+              CASE WHEN v.lic IS NULL THEN NULL::text[]
+                   ELSE (SELECT array_agg(elem) FROM jsonb_array_elements_text(v.lic::jsonb) AS elem)
+              END,
               NOW(), NOW()
        FROM unnest(
          $(numbers)::text[],
@@ -135,7 +141,9 @@ export async function upsertPackagistVersions(
       publishedAts: versions.map((v) => v.publishedAt),
       isLatests: versions.map((v) => v.isLatest),
       isPrereleases: versions.map((v) => v.isPrerelease),
-      licenses: versions.map((v) => v.license),
+      licenses: versions.map((v) =>
+        v.licenses && v.licenses.length > 0 ? JSON.stringify(v.licenses) : null,
+      ),
     },
   )