From a4c2ee360fe85fbca46d3e8b87efc78c5bd9ad46 Mon Sep 17 00:00:00 2001 From: per1234 Date: Mon, 3 Jul 2023 16:02:35 -0700 Subject: [PATCH] Manually define dependency license metadata that was not detected The "Licensed" dependency license checker tool uses the licensee tool to automatically determine the license type based on metadata provided by the dependency author. This must be in a standardized format without any modifications. In cases where that wasn't done, it is necessary to determine the license type and update the dependency license metadata cache in the `.licenses` folder manually. The Licensed tool will check this data whenever the dependency version is updated to make sure the license hasn't changed. --- .../libraries-repository-engine/go/gopkg.in/yaml.v3.dep.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.licenses/libraries-repository-engine/go/gopkg.in/yaml.v3.dep.yml b/.licenses/libraries-repository-engine/go/gopkg.in/yaml.v3.dep.yml index e77248e5..09288ff2 100644 --- a/.licenses/libraries-repository-engine/go/gopkg.in/yaml.v3.dep.yml +++ b/.licenses/libraries-repository-engine/go/gopkg.in/yaml.v3.dep.yml @@ -4,7 +4,9 @@ version: v3.0.1 type: go summary: Package yaml implements YAML support for the Go language. homepage: https://pkg.go.dev/gopkg.in/yaml.v3 -license: other +# Apache-2.0 subsumes MIT +# https://www.gnu.org/licenses/license-compatibility.html#combining +license: apache-2.0 licenses: - sources: LICENSE text: |2