aboutcode-org / aboutcode-org/scancode-toolkit

Apache 2.0 of OpenSSL 3.x or higher gets categorized as openssl-ssleay

Open
#3,645 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description
While scanning an 3.1.4 version of OpenSSL 3.1.4, i realized that some files are matched "openssl-ssleay" but those files clearly state "Apache 2.0" when checked manually

### How To Reproduce
- Scan sources of OpenSSL 3.1.4 (using json Format)
- Open with Scancode Workbench
- Check section "License Explorer"
-> A lot of openssl-ssleay are found but are apache 2.0 if checked manually

### System configuration

* What OS are you running on? (Windows/MacOS/Linux)
Win 10 x64
* What version of scancode-toolkit was used to generate the scan file?
scancode-toolkit 32.0.8, Scancode Workbench 4.0.0
* What installation method was used to install/run scancode? (pip/source download/other)
Installed by pip

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.