DependencyTrack / DependencyTrack/dependency-track

Problems with "Find the License" (search)

Open
#246 1 comment 0 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

There are two places in which finding a particular license within Dependency-Track v3.3.1 can be a bit hard:

1. "Component Details" screen provides a drop-down to allow the license to be specified (or changed). A search field is provided. Type in (say)"GNU" and you'll be provided with all the licenses that match. However, it is not possible to search by "GPL". It would help if the name were extended by the additional of a "short id".

2. Search on "Components" screen does not support searching by License (Aside... it also does not support search by Group).

3. Further to 2) (ie, still on "Components" screen, It's also important to be able to find those components (out of hundreds or thousands in a portfolio) that have NO license attributed. This is where an ability to sort the License column would help. (This is kind of the opposite of #147)

Contributor guide

Open the contributing guide

Research direction

Start with the license dropdown on Component Details and search and sorting on Components; the report describes v3.3.1 and names no files or tests. Confirm which limitations still exist and whether Group search belongs in scope before proceeding. Done means licenses are discoverable by short IDs such as GPL, components can be searched by license, and components without licenses can be located through License-column sorting.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
frontend, search
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.