feat(linter): add rule noUntrustedLicenses (#9474)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

Co-authored-by: Netail <11695769+Netail@users.noreply.github.com>
Co-authored-by: dyc3 <1808807+dyc3@users.noreply.github.com>

Author: 3 people

.changeset/forty-women-move.md

@@ -0,0 +1,12 @@
+---
+"@biomejs/biome": patch
+---
+
+Added the new nursery rule [`noUntrustedLicenses`](https://biomejs.dev/linter/rules/no-untrusted-licenses/). This rule disallows dependencies that ship with invalid licenses or licenses that don't meet the criteria of your project/organisation.
+
+The rule has the following options:
+- `allow`: a list of licenses that can be allowed. Useful to bypass possible invalid licenses from downstream dependencies.
+- `deny`: a list of licenses that should trigger the rule. Useful to deny licenses that don't fit your project/organisation.
+  When both `deny` and `allow` are provided, `deny` takes precedence.
+- `requireOsiApproved`: whether the licenses need to be approved by the [Open Source Initiative](https://opensource.org/).
+- `requireFsfLibre`: whether the licenses need to be approved by the [Free Software Foundation](https://www.gnu.org/licenses/license-list.html).

Cargo.lock

@@ -25,6 +25,8 @@ biome_deserialize    = { workspace = true }
 biome_diagnostics    = { workspace = true }
 biome_json_factory   = { workspace = true }
 biome_json_syntax    = { workspace = true }
+biome_package        = { workspace = true }
+biome_project_layout = { workspace = true }
 biome_rowan          = { workspace = true }
 biome_rule_options   = { workspace = true }
 biome_string_case    = { workspace = true }

crates/biome_configuration/src/analyzer/linter/rules.rs

@@ -64,6 +64,7 @@ fn bench_analyzer(criterion: &mut Criterion) {
                             let json_services = JsonAnalyzeServices {
                                 file_source,
                                 configuration_provider: None,
+                                project_layout: None,
                             };
 
                             biome_json_analyze::analyze(

crates/biome_configuration/src/generated/linter_options_check.rs

@@ -19,6 +19,7 @@ use biome_analyze::{
 };
 use biome_diagnostics::Error;
 use biome_json_syntax::{JsonFileSource, JsonLanguage, TextRange};
+use biome_project_layout::ProjectLayout;
 use biome_suppression::{SuppressionDiagnostic, parse_suppression_comment};
 use std::ops::Deref;
 use std::sync::{Arc, LazyLock};
@@ -37,6 +38,9 @@ pub struct JsonAnalyzeServices {
 
     /// The source file
     pub file_source: JsonFileSource,
+
+    /// The project layout, providing access to package manifests.
+    pub project_layout: Option<Arc<ProjectLayout>>,
 }
 
 /// Run the analyzer on the provided `root`: this process will use the given `filter`
@@ -150,6 +154,7 @@ where
 
     services.insert_service(json_services.configuration_provider);
     services.insert_service(json_services.file_source);
+    services.insert_service(json_services.project_layout);
 
     (
         analyzer.run(biome_analyze::AnalyzerContext {
@@ -202,6 +207,7 @@ mod tests {
         let services = JsonAnalyzeServices {
             file_source: JsonFileSource::json(),
             configuration_provider: None,
+            project_layout: None,
         };
         analyze(
             &parsed.tree(),