aboutcode-org / aboutcode-org/license-expression

SPDX validation should consider arbitrary expressions in format `<KNOWN-LICENSE-ID>"+"` as valid

Aberta
#110 5 comentários 0 reações 0 responsáveis Ver no GitHub
Linguagem predominante
Python
Estrelas
73
Forks
33
Métricas de merge de PRs
Nenhum PR com merge em 30d

Descrição

SPDX license expression allow the following Simple license expressions:
> An SPDX License List Short Form Identifier with a unary "+" operator suffix to represent the current version of the license or any later version. For example: `CDDL-1.0+`

spec & docs:
- https://spdx.github.io/spdx-spec/v3.0.1/annexes/spdx-license-expressions/#simple-license-expressions
- https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/#d3-simple-license-expressions

## request

make the validator and parser support SPDX License Identifiers with a `+` at the end.

## reproduce

I tested with exactly this example `CDDL-1.0+` value, but got a negative, where I expected a positive:

tested with `license-expression==30.4.1`
```py
>>> from license_expression import get_spdx_licensing
>>> lic = get_spdx_licensing()

>>> lic.validate('CDDL-1.0')
ExpressionInfo(
original_expression='CDDL-1.0',
normalized_expression='CDDL-1.0',
errors=[],
invalid_symbols=[]
)

>>> lic.validate('CDDL-1.0+')
ExpressionInfo(
original_expression='CDDL-1.0+',
normalized_expression=None,
errors=['Unknown license key(s): CDDL-1.0+'],
invalid_symbols=['CDDL-1.0+']
)

>>> lic.validate('MIT OR CDDL-1.0+')
ExpressionInfo(
original_expression='MIT OR CDDL-1.0+',
normalized_expression=None,
errors=['Unknown license key(s): CDDL-1.0+'],
invalid_symbols=['CDDL-1.0+']
)
```

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.