CycloneDX / CycloneDX/cyclonedx-maven-plugin
Wrong recognized license
- Dominant language
- Java
- Stars
- 385
- Forks
- 107
- Avg merge
- 17h 31m
- Merged PRs (30d)
- 7
Description
Example, in project JLine https://github.com/jline/jline3
we have in pom:
```
The BSD License
https://opensource.org/licenses/BSD-3-Clause
repo
```
in BOM we have:
```
"type" : "library",
"bom-ref" : "pkg:maven/org.jline/jansi-core@4.4.1?type=jar",
"group" : "org.jline",
...
"licenses" : [
{
"license" : {
"id" : "BSD-4-Clause"
}
}
],
```
and license in project https://github.com/jline/jline3/blob/master/LICENSE.txt
Contributor guide
Research direction
Start with the Maven plugin's license-recognition path and compare the JLine pom, generated BOM entry, and LICENSE.txt shown in the report. Verify why the BSD-3-Clause URL is emitted as BSD-4-Clause; done means the generated BOM reports the license consistently with the project metadata.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100