From 9821989df1241b13825aa0b931b5b251de0a8047 Mon Sep 17 00:00:00 2001 From: Reed Loden Date: Wed, 28 Jan 2026 17:35:29 -0800 Subject: [PATCH] Add license exception for pypi/aiohappyeyeballs License detection sees this package as being: 0BSD AND BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference AND PSF-2.0 AND Python-2.0 Adding a bypass, as the unknown license reference isn't a concern here. --- .github/workflows/dependency-review.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 54f8203..842b790 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -85,6 +85,7 @@ jobs: # npm/bignumber.js: ClearlyDefined error showing inaccurate license # pypi/chardet: LGPL-2.1-or-later -- only approving as a one-off # npm/@img/sharp*: LGPL-3.0-or-later -- only approving as a one-off; for local dev using claude code + # pypi/aiohappyeyeballs: License detection is wrong (incorrectly detecting unknown license) # pypi/psycopg2: LGPL-2.0-or-later AND LGPL-3.0-or-later -- only approving as a one-off # pypi/shapely: LGPL-2.1-only -- only approving as a one-off # pypi/typing-extensions: License detection is wrong (not GPL) @@ -115,6 +116,7 @@ jobs: pkg:pypi/chardet, pkg:npm/@img/sharp-libvips-linuxmusl-arm64, pkg:npm/@img/sharp-libvips-linuxmusl-x64, + pkg:pypi/aiohappyeyeballs, pkg:pypi/psycopg2, pkg:pypi/shapely, pkg:pypi/typing-extensions