Dependency Review Action

[tamirkamara]

Change Description

Adding a dependency review action to better control situations where a PR introduce a new dependency.

Current license breakdown (per the NOTICE file):

MIT License

• azure-ai-formrecognizer - Microsoft's Azure Form Recognizer client library
• opencv-python - Computer vision library for image processing
• spacy-huggingface-pipelines - spaCy integration with Hugging Face
• spaCy - Natural Language Processing library (core PII detection engine)
• pyyaml - YAML parser and emitter
• gunicorn - Python WSGI HTTP Server for production deployments
• pydicom - DICOM medical imaging format library
• pypng - PNG image file format library

Apache-2.0 License

• transformers - Hugging Face transformers library for NLP models
• stanza - Stanford NLP library for language processing
• regex - Enhanced regular expression library
• pytesseract - OCR (Optical Character Recognition) wrapper
• python-phonenumbers - Phone number parsing and validation
• python-gdcm - GDCM (Grassroots DICOM) library binding

BSD-3-Clause License

• tldextract - Top-level domain extraction library
• numpy - Numerical computing library
• flask - Web application framework for REST APIs
• cryptography - Cryptographic recipes and primitives
• pydicom (GDCM portions) - Parts of pydicom use BSD-3-Clause from GDCM

Checklist

• I have reviewed the contribution guidelines
• I have signed the CLA (if required)
• My code includes unit tests
• All unit tests and lint checks pass locally
• My PR contains documentation updates / additions if required