aboutcode-org / aboutcode-org/scancode-toolkit

Inconsistent license detection for AND and OR

Aperta
#3,852 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Python
Stelle
2.6k
Fork
791
Merge medio
1g 12h
PR unite (30g)
5

Descrizione

This package:
https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/

has multiple possibly conflicting license statements:
- The correct license is EPL-1.0 OR LGPL-2.1-only per https://github.com/qos-ch/logback/blob/v_1.1.11/LICENSE.txt (also seen as a notice in all code files such as https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/src/main/java/ch/qos/logback/classic/encoder/PatternLayoutEncoder.java
- The OSGI manifest and the POM just list the two licenses and ignore their relationship
- parent POM: https://github.com/qos-ch/logback/blob/v_1.1.11/pom.xml#L23
- https://github.com/qos-ch/logback/blob/v_1.1.11/logback-classic/src/IBUNDLE-META-INF/MANIFEST.MF (modified at build time to contain this text: `Bundle-License: http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html` )

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.