Urgent Bug: github.com/frankban/quicktest references LGPL license

[Spiderman5000]

Summary

• IBM License Checker found a violation in frankban/quicktest referencing LGPL license.

Details

• I don't see any reference to quicktest in the cast code.
• Can this module be removed from go.sum?
• This is needed ASAP in order for IBM to continue using this module

Thanks!

[Spiderman5000]

[ibmuser]$ go mod why -m github.com/frankban/quicktest
# github.com/frankban/quicktest
github.ibm.com/...
github.com/spf13/cast
github.com/spf13/cast.test
github.com/frankban/quicktest

[sagikazarmark]

@Spiderman5000 quicktwst is only used in test code, it will never end up in any compiled binaries that uses cast as a library.

Go modules does not have a concept of dev dependencies, so they show up in these scans.

This is essentially a false positive check, because it's incorrect to use go.sum for checks like this.