aboutcode-org / aboutcode-org/scancode-toolkit

Add License Category to ScanCode outputs and tools

未關閉
#3,417 0 則留言 1 個 reaction 已指派 2 人 已被 @AyanSinhaMahapatra 認領 在 GitHub 檢視
design needed license scan new feature Priority: medium
主要語言
Python
星號
2.6k
分支
791
平均合併
1 天 12 小時
30 天內合併 PR
5

描述

It seems to be time to add ScanCode License Categories to the standard SCTK JSON output and provide it downstream to SCIO and SCWB. There are no standards for License Categories from SPDX or CycloneDX. The OSI Categories (https://opensource.org/licenses/) are not really intended to help you understand the license conditions. We may want to post an RFC on the topic because we need to consider that ScanCode License Categories could become a defacto standard.

The reason to include them in the standard SCTK output is to make it easier to organize and prioritize an analysis of license detections by logically grouping the licenses by Category - e.g. prioritze analysis of Copyleft-licensed items over Permissive-licensed.
There will be significant design work to decide how to generate the initial License Category for a License Expression and then streamline as much as possible with simple rules. Possibly:

1. Generate a License Category "expression" based on the licenses in the LICENSE EXPRESSION keeping the License Expression notation (AND, OR, WITH, parends)
2. Deduplicate the easy cases: e.g. Permissive AND Permissive => Permissive (there are usually many such cases
3. Define rules for translating common WITH cases to a single Category - see #2897
4. Then work on more rules based on patterns we see for popular FOSS projects and packages.

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。