dependency-check / dependency-check/DependencyCheck
[RFE] Parse LICENSE File Inside Package
Open
enhancement
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
Currently Dependency-Check identifies the license for a library in a certain manner. How exactly I don't know, but I did find that other tools, like the [jk1 Gradle License Report|https://github.com/jk1/Gradle-License-Report] plugin for Gradle is able to identify the licenses for many more.
Please extend the license identification feature so that it will also search for LICENSE files inside packages, and properly detect the type of license based on the contents.
Background: I'd like to standardize on Dependency-Check, because it does not only support Gradle, but it's a solution across build tools.
Contributor guide
Assessment
This issue has not been assessed yet.