aboutcode-org / aboutcode-org/scancode-toolkit

False positive detection with apache-1.1_37_1.RULE

Abierto
#3,366 2 comentarios 0 reacciones 1 asignado Reclamado por @AyanSinhaMahapatra Ver en GitHub
bug license-review
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

A recent scan of about.html in project org.osgi.service.cdi-1.0.0.jar detected apache-1.1 with a score of 73.68 using apache-1.1_37_1.RULE. The about.html file is very clearly a declaration of the apache-2.0 license (also detected, correctly). I believe that the problem is probably caused by the lack of requiring specific text in the RULE. Here is the relevant text in apache-1.1_37_1.RULE:

`Apache Software License 1.1 (available at http://www.apache.org/licenses/LICENSE`

I think that the problem could be resolved by requiring a match on `1.1` or perhaps even `Apache Software License 1.1` which would avoid the false positive on the following matched text in the about.html file:

"matched_text":"available at http://www.apache.org/licenses/LICENSE-"

There is nothing about apache-1.1 in the actual matched text.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.