aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect detection of the tmate license in fastapi

Abierto
#3,652 0 comentarios 0 reacciones 1 asignado Reclamado por @AyanSinhaMahapatra Ver en GitHub
bug
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

A recent scan of fastapi-0.109.2.tar.gz from https://github.com/tiangolo/fastapi/archive/refs/tags/0.109.2.tar.gz resulted in the correct detection of declared_license_expression of `mit` but the other_license_expressions show 7 detections for `tmate` and since that license is copyleft the license_clarity_score shows conflicting_license_categories as true.

But I don't think that tmate code is actually in this project. The reported tmate detections are simply text indicating that a tmate service, provided by github, can be enabled when building the project. For example:

description: 'Run the build with tmate debugging enabled (https://github.com/marketplace/actions/debugging-with-tmate)'

So I think that there is a false positive detection of tmate resulting in fastapi getting a -20 value for conflicting_license_categories when that is not accurate.

Scan results attached.
[fastapi-0.109.2.tar.gz_scan.zip](https://github.com/nexB/scancode-toolkit/files/14225304/fastapi-0.109.2.tar.gz_scan.zip)

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.