CycloneDX / CycloneDX/cyclonedx-maven-plugin

Wrong recognized license

Open
#699 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
385
Forks
107
Avg merge
17h 31m
Merged PRs (30d)
7

Description

Example, in project JLine https://github.com/jline/jline3

we have in pom:

```


The BSD License
https://opensource.org/licenses/BSD-3-Clause
repo


```

in BOM we have:

```
"type" : "library",
"bom-ref" : "pkg:maven/org.jline/jansi-core@4.4.1?type=jar",
"group" : "org.jline",
...
"licenses" : [
{
"license" : {
"id" : "BSD-4-Clause"
}
}
],
```

and license in project https://github.com/jline/jline3/blob/master/LICENSE.txt

Contributor guide

Open the contributing guide

Research direction

Start with the Maven plugin's license-recognition path and compare the JLine pom, generated BOM entry, and LICENSE.txt shown in the report. Verify why the BSD-3-Clause URL is emitted as BSD-4-Clause; done means the generated BOM reports the license consistently with the project metadata.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.