we have scanner to look for js artifact license, however since the package.json not present, but bower.json is