CycloneDX / CycloneDX/cyclonedx-node-yarn

[IDEA] chore: dont ship 3rd party licenses in `NOTICE`

Open
#499 1 comment 0 reactions 1 assignee Claimed by @jkowalleck View on GitHub
chore
Dominant language
JavaScript
Stars
26
Forks
11
Avg merge
17m
Merged PRs (30d)
1

Description

## Is your feature request related to a problem? Please describe.

currently, we ship 3rd party license in our final NOTICE file.

Since we also ship an SBOM with licences now, we don't need this anymore.
instead, we could make 3rd party licenses known in a thirdpartylicenses.txt file - and satte the existence in the notice file.

## Describe the solution you'd like

- [ ] remove 3rd party licenses from shipped `NOTICE` file.
- [ ] have 3rd party licenses in a file `thirdpartylicenses.txt`
- (optional) make the `thirdpartylicenses.txt` anounced in NOTICE file.

## Describe alternatives you've considered

-

## Additional context

- dont have any `thirdpartylicenses.txt` file - but only the SBOM

## Contribution

- [x] I am willing to provide an implementation
- [ ] I will wait until somebody else implements it

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.