As decided in the community meeting from 2021/11/22, we want to scan for problematic dependencies. Candidate tool is go-licenses. Maybe there is also something in golangci-lint.
We should define the criteria for what is problematic and make sure we get red pull requests if those criteria are violated.
Sibling issues: