Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Node-forge license issue as it is installed as dependency #13517

Closed
AshishUpadhyayCivica opened this issue Nov 30, 2022 · 3 comments
Closed

Node-forge license issue as it is installed as dependency #13517

AshishUpadhyayCivica opened this issue Nov 30, 2022 · 3 comments

Comments

@AshishUpadhyayCivica
Copy link

Current Behavior

I am facing a problem of licensing((BSD-3-Clause OR GPL-2.0)) when I am using @nrwl/angular.
The issue is regarding one of the package that is installed as part of dependency.
Consider below
node-forge license dependency

So I am installing @nrwl/angular and all of its dependent packages are installed under MIT license except node-forge.
My security scan detects this as problem as we don't want to use BSD-3-Clause license.

Expected Behavior

I expect the node-forge should be removed as part of dependency of @nrwl/angular as this is creating lot of problems of licensing whilst using @nrwl/angular.

Github Repo

No response

Steps to Reproduce

  1. You can check by installing @nrwl/angular and check the node-forge license.

Nx Report

"node_modules/node-forge": {
      "version": "1.3.1",
      "license": "(BSD-3-Clause OR GPL-2.0)",
      "engines": {
        "node": ">= 6.13.0"
      }
    },

Failure Logs

No response

Additional Information

No response

@FrozenPandaz
Copy link
Collaborator

FrozenPandaz commented Nov 30, 2022

This is a webpack-dev-server/selfsigned issue. Can you raise the issue there?

jfromaniello/selfsigned#54

@AgentEnder
Copy link
Member

I'm going to close this out, since its pretty removed from our stuff.

@github-actions
Copy link

github-actions bot commented Jun 4, 2023

This issue has been closed for more than 30 days. If this issue is still occuring, please open a new issue with more recent context.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jun 4, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants