DependencyTrack / DependencyTrack/dependency-track

Licenses Screen Functionality

Open
#245 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

Based on testing with Dependency-Track v3.3.1, the task of management of licenses within a portfolio could be improved on the "Licenses" screen by:

1. Addition of "License Type" column. For instance:
- Liberal (eg Apache-2.0, CC-BY-ND-4.0)
- Weak Copyleft (eg EPL-1.0)
- Copyleft (eg GPL-1.0)
- Non-Standard (Beerware!)

Or just use the SPDX classification of "FSF Free/Libre" (per [SPDX License list](https://spdx.org/licenses/))

2. It should be possible to sort/filter by type.

3. It would also be useful to have a column that provides a count of "projects affected". (ie 3 = "3 projects use this this specific license), with a link to list such projects.

4. Extending 3), a "total count" could allow (say) filtering by "copyleft" and "weak copyleft" and then seeing that a total of 10 projects use such license types.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.