Feature: New Check "Permissive License"

[fhoeborn]

Is your feature request related to a problem? Please describe. Usage of non-permissive licensed open-source software comes with some legal risk, especially when used by companies. It would be good to have an indicator if software is permissively licensed or if further considerations have to be taken.

Describe the solution you'd like An extended version of the license check, that checks whether a known-permissive license is used for the analyzed repo.

Describe alternatives you've considered Checking for copyleft licenses. But that way around it might fool you into a "safe" license situation because of a non-comprehensive license list in the check. Therefore it is more safe to check for a known-list of "safe" licenses and rather "fail" for everything else.

Additional context Added a possible implementation here https://github.com/ossf/scorecard/pull/3838