DependencyTrack / DependencyTrack/dependency-track
Licenses Screen Functionality
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Based on testing with Dependency-Track v3.3.1, the task of management of licenses within a portfolio could be improved on the "Licenses" screen by:
1. Addition of "License Type" column. For instance:
- Liberal (eg Apache-2.0, CC-BY-ND-4.0)
- Weak Copyleft (eg EPL-1.0)
- Copyleft (eg GPL-1.0)
- Non-Standard (Beerware!)
Or just use the SPDX classification of "FSF Free/Libre" (per [SPDX License list](https://spdx.org/licenses/))
2. It should be possible to sort/filter by type.
3. It would also be useful to have a column that provides a count of "projects affected". (ie 3 = "3 projects use this this specific license), with a link to list such projects.
4. Extending 3), a "total count" could allow (say) filtering by "copyleft" and "weak copyleft" and then seeing that a total of 10 projects use such license types.
Contributor guide
Assessment
This issue has not been assessed yet.