Add licenses to Group Level Dependency List Export

Why are we doing this work

On the Group level Dependency List we display the software licenses for each of the detected dependencies but we do not include this data in the Export. This was originally identified in #422978 (comment 1581018712).

Relevant links

• Example export
• ::API::DependencyListExports

Non-functional requirements

• Documentation:
• Feature flag:
• Performance:
• Testing:

Implementation plan

• Add licenses to the group level dependency list JSON export. source

Verification steps

1. Navigate to the group level dependency list page. example.
2. Click on "Export"
3. Open the downloaded "dependencies.json" file.
4. Verify that each dependency has a "licenses" property. e.g.

  "licenses": [
    {
      "url": "https://spdx.org/licenses/MIT.html",
      "name": "MIT",
      "spdx_identifier": "MIT"
    }
  ]

dependencies.json