cloudflare / cloudflare/cabidela

Problem with licence detection in Snyk

Open
#15 0 comments 2 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
28
Forks
4
PR merge metrics
No merged PRs in 30d

Description

Hello folks,

we recently introduced this dependency to our project and we noticed our Snyk check in CI started failing with the following error:
```
License issues:

✗ Unknown license [High Severity][https://snyk.io/vuln/snyk:lic:npm:cloudflare:cabidela:Unknown] in @cloudflare/cabidela@0.2.4
```

When I go to https://snyk.io/vuln/snyk:lic:npm:cloudflare:cabidela:Unknown I can see:

Image

I checked your https://github.com/cloudflare/cabidela/blob/main/LICENSE and it seems like this lib is using Apache License, Version 2.0 but you have "Cloudflare" license in `package.json`: https://github.com/cloudflare/cabidela/blob/main/package.json#L9

I believe that's the reason why Snyk can't detect it.

Could you please take a look into it? It should be a simple fix 🙏

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.