DependencyTrack / DependencyTrack/dependency-track
Problems with "Find the License" (search)
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
There are two places in which finding a particular license within Dependency-Track v3.3.1 can be a bit hard:
1. "Component Details" screen provides a drop-down to allow the license to be specified (or changed). A search field is provided. Type in (say)"GNU" and you'll be provided with all the licenses that match. However, it is not possible to search by "GPL". It would help if the name were extended by the additional of a "short id".
2. Search on "Components" screen does not support searching by License (Aside... it also does not support search by Group).
3. Further to 2) (ie, still on "Components" screen, It's also important to be able to find those components (out of hundreds or thousands in a portfolio) that have NO license attributed. This is where an ability to sort the License column would help. (This is kind of the opposite of #147)
Contributor guide
Research direction
Start with the license dropdown on Component Details and search and sorting on Components; the report describes v3.3.1 and names no files or tests. Confirm which limitations still exist and whether Group search belongs in scope before proceeding. Done means licenses are discoverable by short IDs such as GPL, components can be searched by license, and components without licenses can be located through License-column sorting.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- frontend, search
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100