pivotal/LicenseFinder — pull request #111 by taavo (2014-09-22 15:17:09+00:00)
Title: Stop looking at bundled dependencies for node.js

This feature never worked, and probably never could. The `bundleDependencies` and `bundledDependencies` keys in npm’s JSON output don't have the metadata we need to collect licenses; they are just arrays of package names.

These names are not a way to point to and install third-party dependencies, and thus there's no way to know what their licenses are. It seems that developers use this feature in combination with `dependencies` to mark some dependencies as being fully included in the npm package archive. See http://stackoverflow.com/a/25044361

Actual output from `npm info --json --long` would look like this:
```javascript
bundleDependencies:
[ 'nopt',
'npmlog',
'request',
'semver',
'tar',
'tar-pack',
'mkdirp',
'rc',
'rimraf' ],
```