Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

implement 'licenseChecker' config option to change how dependency licenses are matched against allowedLicenses #297

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

implement 'licenseChecker' config option to change how dependency licenses are matched against allowedLicenses #297

wants to merge 1 commit into from

Commits on May 26, 2024

  1. implement 'LicenseChecker' config option to change how dependency lic… 

    …enses are matched against allowedLicenses

The default behavior is that a dependency is fine when any of its
licenses are found inside allowedLicenses. This may miss dependencies,
which contain multiple licenses.

When 'AllRequiredLicenseChecker' is set, it will only approve a
dependency when all of its discovered licenses are found in the
allowedLicenses. This may report false-positives for dependencies which are
dual-licensed. But in general I think a false-positive is better than
missing a license violation.

This fixes jk1#285
    @balrok
    balrok committed May 26, 2024
    Configuration menu
    Copy the full SHA
    456809c View commit details
    Browse the repository at this point in the history