aboutcode-org / aboutcode-org/scancode-toolkit

False positive detection on unknown-license-reference_332.RULE

Open
#3,379 1 comment 0 reactions 1 assignee Claimed by @AyanSinhaMahapatra View on GitHub
bug license-review
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

A recent scan of `CHANGELOG.md` in package `which-2.0.2.tgz` returned a detection of unknown-license-reference with a score of 80 on the unknown-license-reference_332.RULE which is based on this rule text: `{{License 1.0}}`

The problem is that the actual text in the CHANGELOG.md file, starting at line 135, is this:
```
## v1.0.6

* isc license

## 1.0.5

* Awful typo
```

Since standard license detection behavior is to ignore punctuation, one can see why this would happen, but it is definitely a false positive detection, although I am afraid I do not have (yet) a good suggestion for an approach to fix this problem. Basically the unknown license should not have been detected and reported at all.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.