Sebastian Schuberth

Thanks for the feedback @harshadsinkar! If you have a chance, could you try if the issue persists when changing the Hoplite version at https://github.com/oss-review-toolkit/ort/blob/e2ee1a7bbedc5ad53b7be0279578c6aa48484c3d/gradle/libs.versions.toml#L33 to `3.0.0.RC1` and rebuilding / rerunning...

Awesome, thanks for checking @harshadsinkar! Unfortunately, it might us a while to upgrade to Hoplite 3.0.0 final (once it's there) due to [this](https://github.com/oss-review-toolkit/ort/pull/9283#issuecomment-2413980473).

> but has it's own lock file and install scripts. Note that only as of Bun 1.2 the (default) [lock file is textual](https://bun.sh/blog/bun-v1.2#introducing-bun-lock) (it was binary before).

@Tony10245 are you still affected by the issue?

Closing due to a lack of feedback.

ORT maintainer writing here 👋🏻 I became aware of this due to https://github.com/oss-review-toolkit/ort/issues/10488. Regarding > Introduce NOMOS as a scanner plugin in ORT. I think it would be great if...

> what would you consider enough to close this Issue, just a docs update outlining `help.deps` and note about reading the plugin README? I would consider that to be a...

> (e.g. only Open Source licenses) are being looked up at the vulnerability provider. This specific check could be implemented way simpler by just trying to look up the license...

Also a more generic (Script based?) approach could be implemented that also addresses the needs of https://github.com/oss-review-toolkit/ort/issues/4892.

Are you using the Docker image? Could be related to the notes mentioned [here](https://github.com/oss-review-toolkit/ort/wiki/ORT-Community-Meeting#2024-09-19), so please try with ORT 33.1.0.