CycloneDX / CycloneDX/cyclonedx-python

feat!: dont "fix" licenses if not needed.

Aperta
#995 3 commenti 0 reazioni 0 assegnatari Vedi su GitHub
breaking change enhancement schema 1.7
Lingua principale
Python
Stelle
390
Fork
98
Merge medio
2g 23h
PR unite (30g)
2

Descrizione

currently, we "fix" licenses
> """
> Per CycloneDX spec, there must be EITHER one license expression OR multiple license id/name.
> If there is an expression, it is used and everything else is moved to evidences, so it is not lost.
> """
> # hack for preventing expressions AND named licenses.
> # see https://github.com/CycloneDX/cyclonedx-python/issues/826
> # see https://github.com/CycloneDX/specification/issues/454

see https://github.com/CycloneDX/cyclonedx-python/blob/ffe63d1f5524c0d4b5788e282bf0d108b688017b/cyclonedx_py/_internal/utils/cdx.py#L102-L119

this is no longer needed since CycloneDX 1.7

feature request: dont "fix" licenses if not needed.

this might be considered a breaking change, since the output result might be different.

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.