aboutcode-org / aboutcode-org/scancode-toolkit

Inconsistent license detection for AND and OR

Open
#3,852 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

This package:
https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/

has multiple possibly conflicting license statements:
- The correct license is EPL-1.0 OR LGPL-2.1-only per https://github.com/qos-ch/logback/blob/v_1.1.11/LICENSE.txt (also seen as a notice in all code files such as https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/src/main/java/ch/qos/logback/classic/encoder/PatternLayoutEncoder.java
- The OSGI manifest and the POM just list the two licenses and ignore their relationship
- parent POM: https://github.com/qos-ch/logback/blob/v_1.1.11/pom.xml#L23
- https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/src/IBUNDLE-META-INF/MANIFEST.MF (modified at build time to contain this text: `Bundle-License: http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html` )

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.