dependency-check / dependency-check/DependencyCheck

[RFE] Distinguish License Name and URL in XML Output

Open
#1,218 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

Currently the OWASP Dependency Check (v3.1.2) is outputting license information in the XML format as text inside a single `` element, with the name and the URL separated by a colon and a space `: `

For example:
```
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
```

That is a combination of the license _name_ and the license _URL_. But when parsing the license, I would like to distinguish the license name and the license URL.

Request: please provide separate access to both data items.

Since backwards compatibility may be a requirement, I suggest to introduce new XML elements. Also, for forward compatibility purposes I suggest to let the structure support multiple alternative licenses.

Suggested new format:

```

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt


The Apache Software License, Version 2.0
http://www.apache.org/licenses/LICENSE-2.0.txt

```

Notice that the suggested syntax for `` is equivalent to what is used for ``.

Note: Later on, we could add things like `confidence` and `evidenceCollected`…

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.