Merge pull request #8338 from backstage/rugvip/license

snyk: ignore MPL and LGPL license warnings
2021-12-13 13:27:09 +01:00
parent 7ba8e10b54 e0f5b46fcc
commit 23a5e8f47a
1 changed files with 12 additions and 0 deletions
@@ -67,4 +67,16 @@ ignore:
        reason: Prototype pollution is not an effective attack against a CLI as it already executes arbitrary code
        expires: 2022-03-06T17:18:55.019Z
        created: 2021-09-06T17:18:55.027Z
+
+  'snyk:lic:npm:rollup-plugin-dts:LGPL-3.0':
+    - '*':
+        reason: Backstage itself does not redistribute this dependency in minified form
+        expires: 2031-09-06T17:18:55.027Z
+        created: 2021-09-06T17:18:55.027Z
+
+  'snyk:lic:npm:axe-core:MPL-2.0':
+    - '*':
+        reason: Backstage itself does not redistribute this dependency in minified form
+        expires: 2031-09-06T17:18:55.027Z
+        created: 2021-09-06T17:18:55.027Z
 patch: {}