[BUG] Snowflake package license misidentified

[nicorikken]

Describe the bug
License of Python Snowflake package is misidentified.
I suspect it has to do with GitHub incorrectly assuming the code is on GitHub. I've seen this issue many times before, also via the GitHub insights in dependencies.

The package itself it limited in scope and explicitly states Apache-2.0 on all places:

• LICENCE Apache-2.0 license
• PKG-INFO contains Apache-2.0 license
• pyproject.toml states Apache-2.0 license
• README.md doesn't state a license

To Reproduce

1. Create Python project with snowflake 1.11.0 package.
2. Scan with dependency-review-action
3. Get scan output:
4. This links to an incorrect repository snowflake which lacks a license. Assumption that this repository is checked for the license, instead of the pypi sourcecode.

Expected behavior
Would list apache-2.0 license.

Screenshots
If applicable, add screenshots to help explain your problem.

Action version
Latest.

Context
We see that many more Python packages are not identified:

[ahpook]

I've remapped the snowflake package to the correct source repo ( snowflakedb/snowflake-connector-python ) so this should get picked up correctly on future runs.

[nicorikken]

Thanks. What is the best way to report or mittigate such issues in the future?