The legal-reference module was removed from the code with 50132c71, but the fossa configuration was missed. As a result, the
fossa-analyze steps were failing, unable to list dependencies in the non-existent project.