Source code inspection and verification

A source code verification method comprising:

• obtaining, by a computer, a build list, wherein the build list comprises a list of one or more source code modules;
• identifying, by the computer, the one or more source code modules in an open source module repository and metadata associated with the one or more source code modules;
• accessing, by the computer, at least a portion of the metadata for each of the one or more source code modules;
• obtaining, by the computer, one or more rules for the one or more source code modules;
• applying, by the computer, the rules to each of the one or more source code modules to determine whether the one or more source code modules satisfy the rules;
• and
• detecting an override command, wherein the override command indicates to omit applying one or more of the rules;
• updating the metadata associated with the one or more source code modules to indicate that the override command was detected;
• generating a source code module summary for the one or more source code modules, wherein the source code module summary identifies the one or more source code modules and comprises the portion of the metadata for each of the one or more source code modules;
• generating, by the computer, a deployable build artifact comprising one or more source code modules when the one or more source code modules satisfying the one or more rules.

A source code building method comprising:

• generating, by a computer, a build list, wherein the build list comprises a list of one or more source code modules;
• obtaining, by the computer, the one or more source code modules and metadata associated with the one or more source code modules from an open source module repository;
• compiling, by the computer, the one or more source code modules and metadata associated with the one or more source code modules to create a build artifact;
• analyzing, by the computer, at least a portion of the metadata for each of the one or more source code modules;
• obtaining, by the computer, one or more rules for the one or more source code modules, wherein the one or more rules comprise a version check rule for the one or more source code modules;
• applying, by the computer, the rules to the one or more source code modules to determine whether the one or more source code modules satisfy the rules;
• generating, by the computer, a deployable build artifact when the one or more source code modules satisfy the one or more rules;
• and
• generating, by the computer, a compliance report for the deployable build artifact, wherein the compliance report identifies the one or more source code modules in the deployable build artifact.