miki3421 opened a new pull request, #33: URL: https://github.com/apache/openserverless-cli/pull/33
## What changed - Removes package.json from dependency.files because the repository has no root Node project or npm lockfile. - Adds version-scoped license declarations for four Go modules that License Eye cannot identify automatically. ## Root cause The release workflow failed in the dependency license check for two independent reasons. License Eye attempted npm ci for the configured package.json input, but no root package.json or package-lock.json exists. It also reported four Go dependencies as Unknown because their license files were absent from the module archive or not recognized by its text matcher. ## License declarations - github.com/xi2/xz: Unlicense classification for its explicit public-domain dedication - github.com/fatih/color: MIT - github.com/go-task/template: BSD-3-Clause - github.com/olekukonko/tablewriter: MIT These are declarations, not exclusions. License Eye continues checking compatibility for these and all other dependencies. Each override is restricted to the exact version in go.mod. ## Validation - Passed License Eye dependency check using apache/skywalking-eyes main at commit 29bd646002b6, matching the action used by CI - YAML syntax parsed successfully - git diff --check passed -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
