aboutcode-org / aboutcode-org/scancode-toolkit
Inaccurate license detection for SPDX license identifier with trimmed, missing trailing parens
Open
bug
enhancement
license scan
- Dominant language
- Python
- Stars
- 2.6k
- Forks
- 791
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 5
Description
A text exactly as `SPDX-License-Identifier: (GPL-2.0-or-later WITH Bootloader-exception` (with a missing trailing paren) will be detected as `(gpl-2.0-plus AND bootloader-exception) AND unknown-spdx` where `unknown-spdx` comes from the missing trailing paren making the expression invalid from strict validation perspective.
We should allow and cope with these kind of cases which can be characterized as the presence of a single opening paren.
Contributor guide
Assessment
This issue has not been assessed yet.