Detecting Un-Known license package "Vulcan.Maui.Template" while scanning MAUI project in Black Duck

[deviprasad987]

Description

We have created project in MAUI, and using Black duck for security vulnerabilities while scanning the MAUI application with Black duck it got detected "Vulcan.Maui.Template" package for Android and MacCatalyst projects but we haven't installed any such packages and there is no references for the same. Could you please help in this.

Please refer the below image for the reference.

Below is the content of the Android and MacCatalyst

Steps to Reproduce

1. Create a MAUI application.
2. Scan the application using Black Duck.
3. The Black duck tool detecting un-known license package "Vulcan.Maui.Template" In Android and MacCatalyst projects.

Link to public reproduction project repository

No response

Version with bug

Unknown/Other

Is this a regression from previous behavior?

No, this is something new

Last version that worked well

Unknown/Other

Affected platforms

Android

Affected platform versions

Android, MacCatalyst

Did you find any workaround?

No response

Relevant log output

No response

[mattleibow]

What is Vulcan.Maui.Template? Never seen that before. I did find this: https://www.nuget.org/packages/Vulcan.Maui.Template

Please open an issue in that repo or with that owner.

[mattleibow]

I also see a full git repo in there:

Unless you know for certain this package/template is correct, please first confirm. I also do not see any linked icense (which may be the issue) or repo. I searched GitHub and I saw this: https://github.com/vulcanlee/Prism-MAUI-Template/tree/main

As you say you are not using this template, I am not sure what is going on.

[mattleibow]

What are you scanning? What paths and what are the full contents of that folder?

[deviprasad987]

@mattleibow
Below is the content of the Android and MacCatalyst projects

[mattleibow]

I am suggesting that since it is not our template nor our code, the real authors should be contacted.

[dotnet-policy-service]

Hi @deviprasad987. We have added the "s/needs-info" label to this issue, which indicates that we have an open question for you before we can take further action. This issue will be closed automatically in 7 days if we do not hear back from you by then - please feel free to re-open it if you come back to this issue after that time.

[dotnet-policy-service]

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment. If it is closed, feel free to comment when you are able to provide the additional information and we will re-investigate.