aboutcode-org / aboutcode-org/scancode-toolkit

False positive detection with apache-1.1_37_1.RULE

Aperta
#3,366 2 commenti 0 reazioni 1 assegnatario Rivendicata da @AyanSinhaMahapatra Vedi su GitHub
bug license-review
Lingua principale
Python
Stelle
2.6k
Fork
791
Merge medio
1g 12h
PR unite (30g)
5

Descrizione

A recent scan of about.html in project org.osgi.service.cdi-1.0.0.jar detected apache-1.1 with a score of 73.68 using apache-1.1_37_1.RULE. The about.html file is very clearly a declaration of the apache-2.0 license (also detected, correctly). I believe that the problem is probably caused by the lack of requiring specific text in the RULE. Here is the relevant text in apache-1.1_37_1.RULE:

`Apache Software License 1.1 (available at http://www.apache.org/licenses/LICENSE`

I think that the problem could be resolved by requiring a match on `1.1` or perhaps even `Apache Software License 1.1` which would avoid the false positive on the following matched text in the about.html file:

"matched_text":"available at http://www.apache.org/licenses/LICENSE-"

There is nothing about apache-1.1 in the actual matched text.

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.