aboutcode-org / aboutcode-org/scancode-toolkit

Inconsistent license detection for AND and OR

Offen
#3,852 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
2.6k
Forks
791
Ø Merge
1 T. 12 Std.
Gemergte PRs (30 T.)
5

Beschreibung

This package:
https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/

has multiple possibly conflicting license statements:
- The correct license is EPL-1.0 OR LGPL-2.1-only per https://github.com/qos-ch/logback/blob/v_1.1.11/LICENSE.txt (also seen as a notice in all code files such as https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/src/main/java/ch/qos/logback/classic/encoder/PatternLayoutEncoder.java
- The OSGI manifest and the POM just list the two licenses and ignore their relationship
- parent POM: https://github.com/qos-ch/logback/blob/v_1.1.11/pom.xml#L23
- https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/src/IBUNDLE-META-INF/MANIFEST.MF (modified at build time to contain this text: `Bundle-License: http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html` )

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.