CycloneDX / CycloneDX/cyclonedx-python

feat!: dont "fix" licenses if not needed.

Ouverte
#995 3 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
breaking change enhancement schema 1.7
Langage dominant
Python
Étoiles
390
Forks
98
Merge moyen
2 j 23 h
PR mergées (30 j)
2

Description

currently, we "fix" licenses
> """
> Per CycloneDX spec, there must be EITHER one license expression OR multiple license id/name.
> If there is an expression, it is used and everything else is moved to evidences, so it is not lost.
> """
> # hack for preventing expressions AND named licenses.
> # see https://github.com/CycloneDX/cyclonedx-python/issues/826
> # see https://github.com/CycloneDX/specification/issues/454

see https://github.com/CycloneDX/cyclonedx-python/blob/ffe63d1f5524c0d4b5788e282bf0d108b688017b/cyclonedx_py/_internal/utils/cdx.py#L102-L119

this is no longer needed since CycloneDX 1.7

feature request: dont "fix" licenses if not needed.

this might be considered a breaking change, since the output result might be different.

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.