CycloneDX / CycloneDX/cyclonedx-python

feat!: dont "fix" licenses if not needed.

Open
#995 3 comments 0 reactions 0 assignees View on GitHub
breaking change enhancement schema 1.7
Dominant language
Python
Stars
390
Forks
98
Avg merge
2d 14h
Merged PRs (30d)
1

Description

currently, we "fix" licenses
> """
> Per CycloneDX spec, there must be EITHER one license expression OR multiple license id/name.
> If there is an expression, it is used and everything else is moved to evidences, so it is not lost.
> """
> # hack for preventing expressions AND named licenses.
> # see https://github.com/CycloneDX/cyclonedx-python/issues/826
> # see https://github.com/CycloneDX/specification/issues/454

see https://github.com/CycloneDX/cyclonedx-python/blob/ffe63d1f5524c0d4b5788e282bf0d108b688017b/cyclonedx_py/_internal/utils/cdx.py#L102-L119

this is no longer needed since CycloneDX 1.7

feature request: dont "fix" licenses if not needed.

this might be considered a breaking change, since the output result might be different.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.