SQ12402
Detected presence of licenses that were marked to issue a warning.
| priority | CI/CD status | severity | effort | SAFE level | SAFE assessment |
|---|---|---|---|---|---|
 | pass | medium | high | None | licenses: warning Reason: restricted license inclusions |
About the issue
Software license is a legal instrument that governs the use and distribution of software source code and its binary representation. Software publishers have the freedom to choose any commonly used or purposefully written license to publish their work under. While some licenses are universally accepted, as they are permissive, others can be intentionally declared as undesirable through the organization policy. This issue is reported for components or their dependencies with licenses that were explicitly marked to issue a warning.
How to resolve the issue
- Confirm that the software package references a component or a dependency with an undesired license.
- Consider replacing the software component with an alternative that offers a license compatible with organization policy.
Incidence statistics
ReversingLabs periodically collects and analyzes the contents of popular software package repositories for threat research purposes. Analysis results are used to calculate incidence statistics for issues (policy violations) that Spectra Assure can detect in software packages.
This section is updated when new data becomes available.
Total amount of packages analyzed
- RubyGems: 183K
- Nuget: 644K
- PyPi: 628K
- NPM: 3.72M