aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect declared license for bunkerweb

Open
#3,859 0 comments 1 reaction 1 assignee Claimed by @AyanSinhaMahapatra View on GitHub
bug must have
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

A recent scan of bunkerweb-1.5.8.tar.gz which was downloaded from
https://github.com/bunkerity/bunkerweb/archive/refs/tags/v1.5.8.tar.gz

resulted in a declared license of bsd-new, even though the project is clearly licensed under agpl-3.0 see
https://github.com/bunkerity/bunkerweb/blob/master/LICENSE.md

It appears that the bsd-new detection came from this file
bunkerweb-1.5.8/src/deps/src/libinjection/COPYING
which relates to the libinjection library used by the project

It seems to me that lower-level license statements (note that this COPYING file is in the /deps/src/ directory) should not influence the assignment of a declared license.

Scan results attached.

[bunkerweb-1.5.8.tar.gz_scan.zip](https://github.com/user-attachments/files/16179304/bunkerweb-1.5.8.tar.gz_scan.zip)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.