CycloneDX / CycloneDX/cyclonedx-node-yarn
[IDEA] chore: dont ship 3rd party licenses in `NOTICE`
- Dominant language
- JavaScript
- Stars
- 26
- Forks
- 11
- Avg merge
- 17m
- Merged PRs (30d)
- 1
Description
## Is your feature request related to a problem? Please describe.
currently, we ship 3rd party license in our final NOTICE file.
Since we also ship an SBOM with licences now, we don't need this anymore.
instead, we could make 3rd party licenses known in a thirdpartylicenses.txt file - and satte the existence in the notice file.
## Describe the solution you'd like
- [ ] remove 3rd party licenses from shipped `NOTICE` file.
- [ ] have 3rd party licenses in a file `thirdpartylicenses.txt`
- (optional) make the `thirdpartylicenses.txt` anounced in NOTICE file.
## Describe alternatives you've considered
-
## Additional context
- dont have any `thirdpartylicenses.txt` file - but only the SBOM
## Contribution
- [x] I am willing to provide an implementation
- [ ] I will wait until somebody else implements it
Contributor guide
Assessment
This issue has not been assessed yet.