aboutcode-org / aboutcode-org/scancode-toolkit

SCTK reports declared_holder incorrectly when a LICENSE file is a license text copyrighted by the Free Software Foundation

Open
#3,877 2 comments 0 reactions 1 assignee Claimed by @AyanSinhaMahapatra View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

A recent scan of MinerU-magic_pdf-0.6.1-released.tar.gz downloaded from https://github.com/opendatalab/MinerU/archive/refs/tags/magic_pdf-0.6.1-released.tar.gz returns misleading copyright information. The project is clearly licensed under agpl-3.0 as the full text of that license is provided in a LICENSE.md file at the top level of the project; however, the project authors have not provided a Copyright statement for the project as a whole although one might assume that OpenDataLab, the owner of the GitHub project, is also the copyright holder, but that is not declared or stated. SCTK incorrectly returns "Free Software Foundation" as the declared_holder, even though the FSF is only the copyright holder of the license text itself, not what the license is applied to. This leads to a further problem in that the declared_copyrights field is then set to true, leading to a misleading license_clarity_score of 100; instead, it should be set to false, and the resulting license_clarity_score should be 90. Details attached.

[MinerU-magic_pdf-0.6.1-released.tar.gz_scan.zip](https://github.com/user-attachments/files/16418396/MinerU-magic_pdf-0.6.1-released.tar.gz_scan.zip)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.