[robinshen]

Thanks for the comment. OneDev has built-in CI/CD which can be used to block pull requests not satisfying desired criteria... This should be a matter of calling into third party license/security check tool such as SonarQube etc.