CycloneDX / CycloneDX/cyclonedx-core-java
License Mapping for BSD-3-Clause and BSD-4-Clause
- Dominant language
- Java
- Stars
- 120
- Forks
- 90
- Avg merge
- 12h 43m
- Merged PRs (30d)
- 18
Description
With this addition to license mappings in PR #195
https://github.com/CycloneDX/cyclonedx-core-java/blob/b664a13f3e7c41a7e086ec508d804c2bd4207140/src/main/resources/license-mapping.json#L67
The consequence is that the component [antlr4](https://github.com/antlr/antlr4) now maps to `BSD-4-Clause` when the intention of the antlr project is the the license should be`BSD-3-Clause`.
See [LICENSE.txt](https://github.com/antlr/antlr4/blob/master/LICENSE.txt)
From antlr4 POM:
```
The BSD License
http://www.antlr.org/license.html
repo
```
So, is this a problem with `cyclonedx-core-java` license mapping, or is it a problem with `antlr4` POM?
The consequence of thinking that a `BSD-3-Clause` is actually `BSD-4-Clause` is that the latter:
* Adds an "advertising clause" that requires an acknowledgment of the original source in all advertising material.
* Was rescinded in 1999
* Is not OSI-approved.
Contributor guide
Assessment
This issue has not been assessed yet.