Description of problem: apache-james-project is bubdling obfuscated JavaScript code that is dual licensed GPL/MIT, however it violates GPLv2 license (because no source code is provided, only obfuscated code, which is not source code, but object code) and violates MIT license by not including the text of the license. It also includes a copy of galleria, which is MIT-licensed, but no license text is included either. The license tag says "ASL 2.0", but it should be "ASL 2.0 and MIT and MIT or GPLv2" Version-Release number of selected component (if applicable): 1.6-3
You should file this issue upstream.
Fixed in 1.8.1-4.