[jira] [Created] (HDDS-11017) [UI] Recon/Jest dependencies are signed with LGPL license which is against Apache license rules

["Abhishek Pal (Jira)" <ji...@apache.org>]

Abhishek Pal created HDDS-11017:
-----------------------------------

             Summary: [UI] Recon/Jest dependencies are signed with LGPL license which is against Apache license rules
                 Key: HDDS-11017
                 URL: https://issues.apache.org/jira/browse/HDDS-11017
             Project: Apache Ozone
          Issue Type: Task
          Components: Ozone Recon
            Reporter: Abhishek Pal


Upon conducting FOSSA scan on the current Ozone code, we found that Jest which is used/installed as a part of react-scripts has transitive dependencies which are signed under LGPL 3.0 only and LGPL 2.0 or later.
The affected dependencies are:
- jsdom
- node-notifier

Both of these are transitive dependencies of Jest.
As a part of this fix we would be migrating from react-scripts and Jest to Vite and vitest.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org