fix(ci): map @react-grab and element-source licenses to MIT in license audit

[msukkari]

Summary by CodeRabbit

• Chores
  • Updated the project’s license mapping to include license information for several packages, replacing unknown entries with MIT values.

[github-actions]

@msukkari your pull request is missing a changelog!

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 2c2a235c-71d5-4e4c-a7cc-7164cfe68cde

📥 Commits

Reviewing files that changed from the base of the PR and between 49a1660 and cb454e7.

📒 Files selected for processing (1)

• scripts/npmLicenseMap.json

---

Walkthrough

This change populates a previously empty JSON license mapping file with three package entries (@react-grab/cli, @react-grab/mcp, element-source), each recording a transition from an "UNKNOWN" old license to an MIT new license.

Changes

License Map Data Update

Layer / File(s)	Summary
Add license mapping entries scripts/npmLicenseMap.json	Populates the empty JSON object with three entries mapping package names to { "old": "UNKNOWN", "new": "MIT" }.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the license audit mapping update for the @react-grab and element-source packages.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix-license-audit-react-grab-overrides

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

License Audit

⚠️ Status: PASS

Metric	Count
Total packages	2222
Resolved (non-standard)	17
Unresolved	0
Strong copyleft	0
Weak copyleft	39

Weak Copyleft Packages (informational)

Package	Version	License
@img/sharp-libvips-darwin-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm	1.0.5	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-ppc64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-riscv64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-wasm32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-wasm32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-win32-arm64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64	0.33.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
axe-core	4.10.3	MPL-2.0
dompurify	3.4.11	(MPL-2.0 OR Apache-2.0)
lightningcss	1.32.0	MPL-2.0
lightningcss-android-arm64	1.32.0	MPL-2.0
lightningcss-darwin-arm64	1.32.0	MPL-2.0
lightningcss-darwin-x64	1.32.0	MPL-2.0
lightningcss-freebsd-x64	1.32.0	MPL-2.0
lightningcss-linux-arm-gnueabihf	1.32.0	MPL-2.0
lightningcss-linux-arm64-gnu	1.32.0	MPL-2.0
lightningcss-linux-arm64-musl	1.32.0	MPL-2.0
lightningcss-linux-x64-gnu	1.32.0	MPL-2.0
lightningcss-linux-x64-musl	1.32.0	MPL-2.0
lightningcss-win32-arm64-msvc	1.32.0	MPL-2.0
lightningcss-win32-x64-msvc	1.32.0	MPL-2.0

Resolved Packages (17)

Package	Version	Original	Resolved	Source
codemirror-lang-elixir	4.0.0	UNKNOWN	Apache-2.0	GitHub repo (livebook-dev/codemirror-lang-elixir) LICENSE file
khroma	2.1.0	UNKNOWN	MIT	GitHub repo (fabiospampinato/khroma) LICENSE file
lezer-elixir	1.1.2	UNKNOWN	Apache-2.0	GitHub repo (livebook-dev/lezer-elixir) LICENSE file
map-stream	0.1.0	UNKNOWN	MIT	npm registry / GitHub repo (dominictarr/map-stream) LICENSE file
memorystream	0.3.1	UNKNOWN	MIT	npm registry licenses field (extracted type from object)
valid-url	1.0.9	UNKNOWN	MIT	GitHub repo (ogt/valid-url) LICENSE file
posthog-js	1.369.0	SEE LICENSE IN LICENSE	(Apache-2.0 AND MIT)	npm registry license field
pause-stream	0.0.11	["MIT","Apache2"]	MIT OR Apache-2.0	extracted from license array
@sentry/cli	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-darwin	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-linux-arm	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-linux-arm64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-linux-i686	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-linux-x64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-win32-arm64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-win32-i686	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft
@sentry/cli-win32-x64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	self-declared (Functional Source License 1.1, MIT Future) - non-SPDX, source-available, not copyleft