Permit usage of dependencies with CC-BY-4.0 license ⚖️

[JamieSlome]

Unblocks CI for #506 & #482

(cc) @msagi @coopernetes

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

[netlify]

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	b1894de
🔍 Latest deploy log	https://app.netlify.com/sites/endearing-brigadeiros-63f9d0/deploys/660fc1cca58e200008dfe064

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 57.35%. Comparing base (afe4ff4) to head (b1894de).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #513   +/-   ##
=======================================
  Coverage   57.35%   57.35%           
=======================================
  Files          39       39           
  Lines        1060     1060           
=======================================
  Hits          608      608           
  Misses        452      452           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[JamieSlome]

@maoo has raised that CC-BY-4.0 is not compatible with the Apache-2.0 license, as described in Category X:

https://community.finos.org/docs/governance/software-projects/license-categories/#category-x

[maoo]

@JamieSlome - my suggestion would be to:

1. revert your change
2. in website/package.json replace dependencies { with devDependencies {
3. in .github/workflows/dependency-review.yml remove development from fail-on-scope

Step 2 is ok because we don't ship any code from the website folder, we only use it to run docusaurus build (from Netlify).

[JamieSlome]

No longer want to permit usage of dependencies with CC-BY-4.0 due to incompatibility with Apache-2.0 license 👍

[JamieSlome]

@maoo - implemented your requested change in #514