Incompatible licenses with "AND" in health_checks

[megha-narayanan]

Environment information

System:
  OS: macOS 15.4.1
  CPU: (10) arm64 Apple M1 Pro
  Memory: 175.94 MB / 32.00 GB
  Shell: /bin/zsh
Binaries:
  Node: 18.20.2 - ~/.local/share/mise/installs/node/18.20.2/bin/node
  Yarn: undefined - undefined
  npm: 10.5.0 - ~/.local/share/mise/installs/node/18.20.2/bin/npm
  pnpm: undefined - undefined
NPM Packages:
  @aws-amplify/ai-constructs: 1.5.3
  @aws-amplify/auth-construct: 1.8.1
  @aws-amplify/backend: 1.16.1
  @aws-amplify/backend-ai: 1.5.1
  @aws-amplify/backend-auth: 1.7.1
  @aws-amplify/backend-cli: 1.8.0
  @aws-amplify/backend-data: 1.6.1
  @aws-amplify/backend-deployer: 2.1.3
  @aws-amplify/backend-function: 1.14.1
  @aws-amplify/backend-output-schemas: 1.7.0
  @aws-amplify/backend-output-storage: 1.3.1
  @aws-amplify/backend-secret: 1.4.0
  @aws-amplify/backend-storage: 1.4.1
  @aws-amplify/cli-core: 2.2.1
  @aws-amplify/client-config: 1.8.0
  @aws-amplify/data-construct: 1.16.1
  @aws-amplify/data-schema: 1.20.5
  @aws-amplify/deployed-backend-client: 1.8.0
  @aws-amplify/form-generator: 1.2.1
  @aws-amplify/model-generator: 1.2.0
  @aws-amplify/platform-core: 1.10.0
  @aws-amplify/plugin-types: 1.11.0
  @aws-amplify/sandbox: 2.1.2
  @aws-amplify/schema-generator: 1.4.0
  @aws-cdk/toolkit-lib: Not Found
  aws-amplify: 6.14.4
  aws-cdk-lib: 2.201.0
  typescript: 5.8.3
No AWS environment variables
No CDK environment variables

Describe the bug

The health_checks script notes packages have "Incompatible Licenses" when they have a combination of licenses, even if one is permitted. For example, in check:dependencies, I get the following:

The following dependencies have incompatible licenses: package-lock.json » @aws-cdk/[email protected] – License: Apache-2.0 AND ISC AND MIT Error: Dependency review detected incompatible licenses.

This is marked as incompatible, even though MIT is on the list of compatible licenses, and so is Apache-2.0.

A temporary workaround has been achieved by adding these "combinations" to the list of allowed licenses.

Reproduction steps

See run here: https://github.com/aws-amplify/amplify-backend/actions/runs/15931328492/attempts/1#summary-44940990677