Tools: Invalid licenses in node_modules

[RaviVaranasi]

I'm seeing linting error even though node_modules is in lint.ignore section

rome.json in .config

// For configuration documentation see http://romefrontend.dev/#project-configuration
name: "rome-poc"
root: true
lint: {
    ignore: ["node_modules/**"]

}

Run rome check

node_modules/pouchdb-collections/package.json:44:14 parse/spdxLicense ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  ✖ Unknown SPDX license Apache

  ℹ Did you mean Apache-1.0?

  - Apache
  + Apache-1.0

  ℹ Or one of these?

  - Apache-1.1
  - Apache-2.0

[sebmck]

We "lint" package.json files but it’s not really linting. We load, normalize, and validate any we see during project initialization since they’re required for module resolution.

It has been an area of confusion though because you cannot ignore them because any validation errors are either legitimate problems or bugs/unhandled validation cases, and are fatal.

[mrewers]

So what is the resolution here? I'm not sure it's reasonable to expect that people only use dependencies that have a valid license in the package.json since that is largely out of their control.

[sebmck]

Probably a project config option to allow certain invalid licenses.

[RaviVaranasi]

FYI: this is a template generated with expo to generate a react-native application.

[ematipico]

Next release will have a new configuration space where to store these invalid licenses