Issues

• [BUG] License always NULL / Unknown

  bug
  actions/dependency-review-action#1169 · Filter by author ytterx opened on Oct 13, 2026
  1

• [BUG] License IDs reported in lowercase for pub (Dart) packages fail validation

  bug
  actions/dependency-review-action#1168 · Filter by author timbortnik opened on Oct 4, 2026
  1

• [BUG] Developer dependency reports documentation license as well

  bug
  actions/dependency-review-action#1145 · Filter by author sondavidb opened on Sep 2, 2026

• Wrong license reported for strtok3@10.3.5

  bug
  actions/dependency-review-action#1143 · Filter by author Shady-Badran opened on Aug 14, 2026
  1

• base-ref accepts an abbreviated commit SHA and silently returns an empty comparison

  actions/dependency-review-action#1142 · Filter by author h1-hackerone-tester opened on Aug 12, 2026

• [BUG] Dependency graph API returns null license for all un-pinned version specifiers (e.g. pyproject.toml ranges)

  bug
  actions/dependency-review-action#1135 · Filter by author ppulc opened on Jul 24, 2026
  

• PR Comments remain when issues have cleared

  enhancement
  actions/dependency-review-action#1127 · Filter by author tchupp opened on Jul 15, 2026

• [BUG] Multilicense packages are not approved even if an accepted license is one of them

  bug
  actions/dependency-review-action#1125 · Filter by author thijsmie opened on Jul 7, 2026

• exclude or whitelist certain dependencies

  enhancement
  actions/dependency-review-action#1118 · Filter by author tobiasehlert opened on Jun 18, 2026

• [BUG] Recently updated NPM packages show "Unknown License"

  bug
  actions/dependency-review-action#1115 · Filter by author jescalada opened on Jun 7, 2026
  3

• Idk what I'm doing

  enhancement
  actions/dependency-review-action#1113 · Filter by author jeffordsshannon-ops opened on Jun 4, 2026

• [BUG] swagger-ui-dist listed as MPL-2.0, but all sources seem to say it's Apache License 2.0

  bug
  actions/dependency-review-action#1105 · Filter by author konradkorczynski opened on May 20, 2026

• [BUG] Update actions/dependency-review-action from 4 to 5 breaks on Unknown License

  bug
  actions/dependency-review-action#1099 · Filter by author hspaans opened on May 10, 2026
  3

• Downgrade "skipping comment creation" message from warning to info

  enhancement
  actions/dependency-review-action#1090 · Filter by author JordanLongstaff opened on Apr 30, 2026

• [BUG] dependency-review-action flags different vulnerabilities for identical inputs across workflows

  bugStale
  actions/dependency-review-action#1085 · Filter by author vyastj opened on Apr 8, 2026
  1

• Allow configuring a proprietary non-SPDX-listed license

  enhancement
  actions/dependency-review-action#1038 · Filter by author Clockwork-Muse opened on Jan 13, 2026
  3

• Add ability to block recently published packages (cooldown feature)

  enhancement
  actions/dependency-review-action#1023 · Filter by author geo-cm opened on Nov 25, 2025
  2

• Support looking up snapshot

  enhancement
  actions/dependency-review-action#985 · Filter by author stevehipwell opened on Sep 26, 2025
  4

• [BUG] Vulnerability, License and ScoreCard Info missing for API Dependency Submission

  bug
  actions/dependency-review-action#923 · Filter by author maennchen opened on Apr 26, 2025
  5

• Scan the result of merge instead of diff

  enhancementStale
  actions/dependency-review-action#922 · Filter by author Wovchena opened on Apr 17, 2025
  5

• Add list of resolved vulnerabilities to the PR Comment / Logs

  enhancement
  actions/dependency-review-action#717 · Filter by author felickz opened on Mar 20, 2024
  12

• Add configuration option to fail a run if we encounter unknown licenses

  enhancement
  actions/dependency-review-action#672 · Filter by author wmmc88 opened on Jan 26, 2024
  15

• Handle API errors / rate limits more gracefully

  bugenhancementKeep
  actions/dependency-review-action#555 · Filter by author rajbos opened on Aug 28, 2023

• Allow ignoring particular sources of dependencies

  enhancementKeep
  actions/dependency-review-action#459 · Filter by author AlekSi opened on Apr 19, 2023
  1

• Properly handle 502s from Dependency Review API

  enhancementKeep
  actions/dependency-review-action#398 · Filter by author febuiles opened on Feb 8, 2023
  3