dependency: add clone to baseline

[vince-fugnitto]

What it does

The pull-request adds clone (MIT) to our baseline in order to detect actual dependency updates in pull-requests.
The IP check is under review, and clone@2.1.2 has been added to the framework a while ago.

How to test

• confirm that the "3PP License Check" job passes

Review checklist

• As an author, I have thoroughly tested my changes and carefully followed the review guidelines

Reminder for reviewers

• As a reviewer, I agree to behave in accordance with the review guidelines

[marcdumais-work]

@vince-fugnitto I think this dependency used to pass the dash-licenses but maybe the clearlydefined score changed, and now it doesn't any more?

[marcdumais-work]

I checked clone's repo and found no indication that this package is under any license other than MIT. I noticed the clearlydefined score is only 53, which probably explains why dash-licenses did not trust it. However, I do not think this score means much. TL;DR: I think this is a false positive. Until the IP ticket is approved, I agree we should add it to the baseline.

[marcdumais-work]

repo: https://github.com/pvorb/clone

[marcdumais-work]

LGTM - thanks Vince! I left a small comment for your consideration (optional).