aboutcode-org / aboutcode-org/scancode-toolkit
False positive detection with apache-1.1_37_1.RULE
- Langage dominant
- Python
- Étoiles
- 2.6k
- Forks
- 791
- Merge moyen
- 1 j 12 h
- PR mergées (30 j)
- 5
Description
A recent scan of about.html in project org.osgi.service.cdi-1.0.0.jar detected apache-1.1 with a score of 73.68 using apache-1.1_37_1.RULE. The about.html file is very clearly a declaration of the apache-2.0 license (also detected, correctly). I believe that the problem is probably caused by the lack of requiring specific text in the RULE. Here is the relevant text in apache-1.1_37_1.RULE:
`Apache Software License 1.1 (available at http://www.apache.org/licenses/LICENSE`
I think that the problem could be resolved by requiring a match on `1.1` or perhaps even `Apache Software License 1.1` which would avoid the false positive on the following matched text in the about.html file:
"matched_text":"available at http://www.apache.org/licenses/LICENSE-"
There is nothing about apache-1.1 in the actual matched text.
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.