aboutcode-org / aboutcode-org/scancode-toolkit

False positive detection with apache-1.1_37_1.RULE

未关闭
#3,366 2 条评论 0 个 reaction 已指派 1 人 已被 @AyanSinhaMahapatra 认领 在 GitHub 查看
bug license-review
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

A recent scan of about.html in project org.osgi.service.cdi-1.0.0.jar detected apache-1.1 with a score of 73.68 using apache-1.1_37_1.RULE. The about.html file is very clearly a declaration of the apache-2.0 license (also detected, correctly). I believe that the problem is probably caused by the lack of requiring specific text in the RULE. Here is the relevant text in apache-1.1_37_1.RULE:

`Apache Software License 1.1 (available at http://www.apache.org/licenses/LICENSE`

I think that the problem could be resolved by requiring a match on `1.1` or perhaps even `Apache Software License 1.1` which would avoid the false positive on the following matched text in the about.html file:

"matched_text":"available at http://www.apache.org/licenses/LICENSE-"

There is nothing about apache-1.1 in the actual matched text.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。