aboutcode-org / aboutcode-org/scancode-toolkit
False positive detection with apache-1.1_37_1.RULE
- 主要語言
- Python
- 星號
- 2.6k
- 分支
- 791
- 平均合併
- 1 天 12 小時
- 30 天內合併 PR
- 5
描述
A recent scan of about.html in project org.osgi.service.cdi-1.0.0.jar detected apache-1.1 with a score of 73.68 using apache-1.1_37_1.RULE. The about.html file is very clearly a declaration of the apache-2.0 license (also detected, correctly). I believe that the problem is probably caused by the lack of requiring specific text in the RULE. Here is the relevant text in apache-1.1_37_1.RULE:
`Apache Software License 1.1 (available at http://www.apache.org/licenses/LICENSE`
I think that the problem could be resolved by requiring a match on `1.1` or perhaps even `Apache Software License 1.1` which would avoid the false positive on the following matched text in the about.html file:
"matched_text":"available at http://www.apache.org/licenses/LICENSE-"
There is nothing about apache-1.1 in the actual matched text.
貢獻指南
評估
這個 Issue 還沒有評估資料。