dependency-check / dependency-check/DependencyCheck
[RFE] Distinguish License Name and URL in XML Output
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
Currently the OWASP Dependency Check (v3.1.2) is outputting license information in the XML format as text inside a single `` element, with the name and the URL separated by a colon and a space `: `
For example:
```
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
```
That is a combination of the license _name_ and the license _URL_. But when parsing the license, I would like to distinguish the license name and the license URL.
Request: please provide separate access to both data items.
Since backwards compatibility may be a requirement, I suggest to introduce new XML elements. Also, for forward compatibility purposes I suggest to let the structure support multiple alternative licenses.
Suggested new format:
```
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
The Apache Software License, Version 2.0
http://www.apache.org/licenses/LICENSE-2.0.txt
```
Notice that the suggested syntax for `` is equivalent to what is used for ``.
Note: Later on, we could add things like `confidence` and `evidenceCollected`…
Contributor guide
Assessment
This issue has not been assessed yet.