Picking up dependencies license info

Hi, the tooling is including license info from dependency/third party notice files in the "declared" field - see https://clearlydefined.io/definitions/gem/rubygems/-/nokogiri/1.13.9/1.13.9.

This is incorrect. The "declared" field should only be the top level license for that package.

Use the linked ClearlyDefined Nokogiri definition as the reproduction and inspect how the crawler populates the "declared" field from dependency and third-party notice files. No source files or tests are named; done means the field contains only the package's top-level license, not licenses collected from dependency notices.

Written by the indexing model from the issue text.