dependency-check / dependency-check/DependencyCheck

[RFE] Parse LICENSE File Inside Package

Open
#1,219 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

Currently Dependency-Check identifies the license for a library in a certain manner. How exactly I don't know, but I did find that other tools, like the [jk1 Gradle License Report|https://github.com/jk1/Gradle-License-Report] plugin for Gradle is able to identify the licenses for many more.

Please extend the license identification feature so that it will also search for LICENSE files inside packages, and properly detect the type of license based on the contents.

Background: I'd like to standardize on Dependency-Check, because it does not only support Gradle, but it's a solution across build tools.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.