aboutcode-org / aboutcode-org/scancode-toolkit

Consider detected copyrights when determining a declared holder from a package manifest in summary plugin

未关闭
#2,972 6 条评论 0 个 reaction 已指派 1 人 已被 @JonoYang 认领 在 GitHub 查看
bug primary-summary
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

When scanning the package `atheris v 2.0.11` (https://github.com/google/atheris/archive/refs/tags/2.0.11.tar.gz) using the `--summary` plugin, the `declared_holder` value in the scan summary is `Bitshift`, which is the author of the package. This was determined from the parsed package data from the `setup.py` file of `atheris`. However, the `setup.py` contains a comment that is a copyright statement with the actual copyright holders. The summary plugin should be updated to also consider copyrights detected by the copyright scanner. This value should take precedence over authors.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。