See context in https://github.com/revanite-io/pvtr-github-repo/pull/69#issuecomment-2831059767 TLDR; the check as implemented can be more rigorous in how it finds and evaluates any license(s) associated with released artifacts