SQ12403
Detected presence of licenses that were explicitly restricted.
| priority | CI/CD status | severity | effort | SAFE level | SAFE assessment |
|---|---|---|---|---|---|
 | fail | high | high | 1 | licenses: fail Reason: restricted license inclusions |
About the issue
Software license is a legal instrument that governs the use and distribution of software source code and its binary representation. Software publishers have the freedom to choose any commonly used or purposefully written license to publish their work under. While some licenses are universally accepted, as they are permissive, others can be intentionally declared as undesirable through the organization policy. This issue is reported for components or their dependencies with licenses that were explicitly marked as restricted.
How to resolve the issue
- Confirm that the software package references a component, or a dependency, with a restricted license.
- Consider replacing the software component with an alternative that offers a license compatible with organization policy.
Incidence statistics
ReversingLabs periodically collects and analyzes the contents of popular software package repositories for threat research purposes. Analysis results are used to calculate incidence statistics for issues (policy violations) that Spectra Assure can detect in software packages.
The data in this section is refreshed monthly.
Total amount of packages analyzed
- RubyGems: 183K
- Nuget: 644K
- PyPi: 628K
- NPM: 3.72M