aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect detection of the tmate license in fastapi

未关闭
#3,652 0 条评论 0 个 reaction 已指派 1 人 已被 @AyanSinhaMahapatra 认领 在 GitHub 查看
bug
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

A recent scan of fastapi-0.109.2.tar.gz from https://github.com/tiangolo/fastapi/archive/refs/tags/0.109.2.tar.gz resulted in the correct detection of declared_license_expression of `mit` but the other_license_expressions show 7 detections for `tmate` and since that license is copyleft the license_clarity_score shows conflicting_license_categories as true.

But I don't think that tmate code is actually in this project. The reported tmate detections are simply text indicating that a tmate service, provided by github, can be enabled when building the project. For example:

description: 'Run the build with tmate debugging enabled (https://github.com/marketplace/actions/debugging-with-tmate)'

So I think that there is a false positive detection of tmate resulting in fastapi getting a -20 value for conflicting_license_categories when that is not accurate.

Scan results attached.
[fastapi-0.109.2.tar.gz_scan.zip](https://github.com/nexB/scancode-toolkit/files/14225304/fastapi-0.109.2.tar.gz_scan.zip)

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。