aboutcode-org / aboutcode-org/scancode-toolkit

Handle complex multi-level license file references

Open
#3,848 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

See https://github.com/vt-middleware/passay by @dfish3r

It has multiple file references notices
- header notice in code refers to -> LICENSE notice refers to -> LICENSE-apache2 and LICENSE-lgpl full texts

The actual files are:

- https://github.com/vt-middleware/passay/blob/main/LICENSE is
> This product is dual licensed under a choice of either the Apache-2.0 or the LGPL-3.0 license.
> See LICENSE-apache2 and LICENSE-lgpl for the full text of the licenses.

- https://github.com/vt-middleware/passay/blob/main/LICENSE-apache2 and https://github.com/vt-middleware/passay/blob/main/LICENSE-lgpl are full texts

- https://github.com/vt-middleware/passay/blob/main/src/main/java/org/passay/AbstractDictionaryRule.java#L1C1-L1C58 is
> /* See LICENSE for licensing and NOTICE for copyright. */

- https://github.com/vt-middleware/passay/blob/main/NOTICE is just misc. credits

- https://github.com/vt-middleware/passay/blob/main/pom.xml is the ambiguous:
```XML


Apache 2
https://www.apache.org/licenses/LICENSE-2.0.txt


GNU Lesser General Public License
https://www.gnu.org/licenses/lgpl-3.0.txt


```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.