aboutcode-org / aboutcode-org/scancode-toolkit

Unexpected "free-unknown" detections in PaddleNLP 2.3.0

Đang mở
#2,965 5 bình luận 0 reaction 2 người được giao Được @DennisClark nhận Xem trên GitHub
bug license-review revisit
Ngôn ngữ chính
Python
Star
2.6k
Fork
791
Merge trung bình
1 ngày 12 giờ
Pull request đã merge (30 ngày)
5

Mô tả

See attached scan results. I scanned https://github.com/PaddlePaddle/PaddleNLP/archive/refs/tags/v2.3.0.tar.gz using a recent version of SCTK The results were generally quite impressive, but I was concerned about 274 "free-unknown" occurrences detected. These are generally of the pattern "# This file is distributed under the same license as the PaddleNLP package." Given that the Declared License of the project, apache-2.0, is definitely asserted properly and noted as such by the scan, it is misleading to refer to these as free-unknown. One might even argue (perhaps) that the developers are trying to do things properly with these lower level statements, which allow for flexibility in case the overall project license is changed at some point.

I imagine that generalized code to interpret the pattern "# This file is distributed under the same license as the PaddleNLP package." could be rather challenging, but it could be very valuable to make that attempt, especially since this kind of pattern could be the cause of other detections of the "unknown" type.

[PaddleNLP-2.3.0.tar.gz_scan.json.zip](https://github.com/nexB/scancode-toolkit/files/8718058/PaddleNLP-2.3.0.tar.gz_scan.json.zip)

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.