PR feedback

Author: maclockard

.github/workflows/dependency-review.yml

@@ -81,7 +81,6 @@ jobs:
           # npm/bignumber.js: ClearlyDefined error showing inaccurate license
           # pypi/chardet: LGPL-2.1-or-later -- only approving as a one-off
           # npm/@img/sharp*: For local dev using claude code
-          # npm/@anthropic-ai/claude-code: For local dev using claude code
           allow-dependencies-licenses: >-
             pkg:npm/@lancedb/lancedb,
             pkg:npm/@lancedb/lancedb-darwin-arm64,
@@ -106,10 +105,9 @@ jobs:
             pkg:maven/com.google.errorprone/error_prone_annotations,
             pkg:npm/canvas,
             pkg:npm/bignumber.js,
-            pkg:pypi/chardet
-            pkg:npm/%2540limg/sharp-libvips-linuxmusl-arm64
-            pkg:npm/%2540limg/sharp-libvips-linuxmusl-x64
-            pkg:npm/%2540lanthropic-ai/claude-code
+            pkg:pypi/chardet,
+            pkg:npm/@img/sharp-libvips-linuxmusl-arm64,
+            pkg:npm/@img/sharp-libvips-linuxmusl-x64
 
           # Known vulnerabilities we're ok with ignoring.
           # These are generally because they are in an older python kernel