Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
LICENSE in the project's root directory was a symlink to LICENSES/Apache..., to comply with REUSE's requirement to have all license files below the LICENSES directory.
However, the symlink was not consistently handled by the GitHub API, hence, the API reported that Steady has an unknown license, which led to one of the problems described in https://github.com/todogroup/ospolandscape/issues/97.
Details:
Some GitHub API endpoints properly resolve the symlink and deliver the content of the link target as base64. In particular, this holds true for the Licenses API: https://api.github.com/repos/eclipse/steady/license
However, this content is not looked at to populate the license property of the result JSON (both Licenses API and Repos API): https://api.github.com/repos/eclipse/steady. Instead, they just return Name: Other with spdx_id: NOASSERTION.
LICENSEin the project's root directory was a symlink toLICENSES/Apache..., to comply with REUSE's requirement to have all license files below the LICENSES directory.However, the symlink was not consistently handled by the GitHub API, hence, the API reported that Steady has an unknown license, which led to one of the problems described in https://github.com/todogroup/ospolandscape/issues/97.
Details:
Name: Otherwithspdx_id: NOASSERTION.TODOs