From 6a0b969d29a089889a7c2aa550131af5e3aa8bd0 Mon Sep 17 00:00:00 2001 From: Mike Haller Date: Wed, 27 Mar 2024 09:37:12 +0000 Subject: [PATCH] Curating licenses for python dependencies --- .ort.yml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/.ort.yml b/.ort.yml index 403883d..cca4595 100644 --- a/.ort.yml +++ b/.ort.yml @@ -25,7 +25,18 @@ curations: curations: comment: "Proper license is defined in package repository https://pypi.org/project/packaging/" concluded_license: "Apache-2.0" - + - id: "PyPI::mypy:1.9.0" + curations: + comment: "Proper license is defined in package repository https://pypi.org/project/mypy/" + concluded_license: "MIT" + - id: "PyPI::setuptools:69.2.0" + curations: + comment: "Proper license is defined in package repository https://pypi.org/project/setuptools/" + concluded_license: "MIT" + - id: "PyPI::coverage:7.4.4" + curations: + comment: "Proper license is defined in package repository https://pypi.org/project/coverage/" + concluded_license: "Apache-2.0" resolutions: vulnerabilities: - id: "CVE-2018-20225"