ci: dependency review

.github/workflows/dependency-review.yml

@@ -0,0 +1,59 @@
+name: "Dependency Review"
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Checkout Repository"
+        uses: actions/checkout@v4
+      - name: "Dependency Review"
+        uses: actions/dependency-review-action@v4
+        with:
+          allow-licenses: |
+            0BSD,
+            AFL-1.1,
+            AFL-1.2,
+            AFL-2.0,
+            AFL-2.1,
+            AFL-3.0,
+            AGPL-3.0-only,
+            AGPL-3.0-or-later,
+            Apache-1.1,
+            Apache-2.0,
+            APSL-2.0,
+            Artistic-2.0,
+            BlueOak-1.0.0,
+            BSD-2-Clause,
+            BSD-3-Clause-Clear,
+            BSD-3-Clause,
+            BSL-1.0,
+            CAL-1.0,
+            CC-BY-3.0,
+            CC-BY-4.0,
+            CC-BY-SA-4.0,
+            CDDL-1.0,
+            CC0-1.0,
+            EPL-2.0,
+            GPL-2.0-only,
+            GPL-2.0-or-later,
+            GPL-2.0,
+            GPL-3.0-or-later,
+            ISC,
+            LGPL-2.0-only,
+            LGPL-2.1-only,
+            LGPL-2.1-or-later,
+            LGPL-2.1,
+            LGPL-3.0-only,
+            LGPL-3.0,
+            MIT,
+            MPL-2.0,
+            OFL-1.1,
+            PSF-2.0,
+            Python-2.0,
+            Python-2.0.1,
+            Unicode-DFS-2016,
+            Unlicense

README.md

@@ -8,9 +8,9 @@
 [![npm][npm]][npm-url]
 
 [![node][node]][node-url]
+[![builds1][builds1]][builds1-url]
 [![builds2][builds2]][builds2-url]
 [![coverage][cover]][cover-url]
-[![licenses][licenses]][licenses-url]
 [![PR's welcome][prs]][prs-url]
 
   <br>
@@ -716,6 +716,8 @@ src="https://static.monei.net/monei-logo.svg" height="30" alt="MONEI"></a>
 [node-url]: https://nodejs.org
 [prs]: https://img.shields.io/badge/PRs-welcome-brightgreen.svg
 [prs-url]: https://webpack.js.org/contribute/
+[builds1]: https://github.com/webpack/webpack/actions/workflows/test.yml/badge.svg
+[builds1-url]: https://github.com/webpack/webpack/actions/workflows/test.yml
 [builds2]: https://dev.azure.com/webpack/webpack/_apis/build/status%2Fwebpack.webpack?branchName=main
 [builds2-url]: https://dev.azure.com/webpack/webpack/_build/latest?definitionId=3&branchName=main
 [licenses-url]: https://app.fossa.io/projects/git%2Bhttps%3A%2F%2Fgithub.com%2Fwebpack%2Fwebpack?ref=badge_shield