CycloneDX / CycloneDX/cyclonedx-python

feat!: dont "fix" licenses if not needed.

Offen
#995 3 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
breaking change enhancement schema 1.7
Vorherrschende Sprache
Python
Sterne
390
Forks
98
Ø Merge
2 T. 23 Std.
Gemergte PRs (30 T.)
2

Beschreibung

currently, we "fix" licenses
> """
> Per CycloneDX spec, there must be EITHER one license expression OR multiple license id/name.
> If there is an expression, it is used and everything else is moved to evidences, so it is not lost.
> """
> # hack for preventing expressions AND named licenses.
> # see https://github.com/CycloneDX/cyclonedx-python/issues/826
> # see https://github.com/CycloneDX/specification/issues/454

see https://github.com/CycloneDX/cyclonedx-python/blob/ffe63d1f5524c0d4b5788e282bf0d108b688017b/cyclonedx_py/_internal/utils/cdx.py#L102-L119

this is no longer needed since CycloneDX 1.7

feature request: dont "fix" licenses if not needed.

this might be considered a breaking change, since the output result might be different.

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.