aboutcode-org / aboutcode-org/scancode-toolkit

LGPL-3 detected as LGPL-2.1-or-later

Open
#3,899 2 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description

In https://github.com/SonarSource/sonar-scanner-maven/blob/53e9129f153147127497f0963693ce455f45fa23/pom.xml#L21 ScanCode detects LGPL-2.1-or-later instead of LGPL-3

```
{
"identifier": "lgpl_2_1_plus-e6194c82-a050-b804-6e64-3581e213b2da",
"license_expression": "lgpl-2.1-plus",
"license_expression_spdx": "LGPL-2.1-or-later",
"detection_count": 1,
"reference_matches": [
{
"license_expression": "lgpl-2.1-plus",
"license_expression_spdx": "LGPL-2.1-or-later",
"from_file": "codebase/sonar-scanner-maven-53e9129f153147127497f0963693ce455f45fa23/pom.xml",
"start_line": 19,
"end_line": 25,
"matcher": "3-seq",
"score": 82.61,
"matched_length": 19,
"match_coverage": 82.61,
"rule_relevance": 100,
"rule_identifier": "lgpl-2.1-plus_484.RULE",
"rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/lgpl-2.1-plus_484.RULE",
"matched_text": " \n \n GNU LGPL 3\n http://www.gnu.org/licenses/lgpl.txt\n repo\n \n "
}
]
},
```

### How To Reproduce

```
"headers": [
{
"tool_name": "scancode-toolkit",
"tool_version": "32.2.1",
"options": {
"--copyright": true,
"--email": true,
"--info": true,
"--license": true,
"--license-text": true,
"--package": true,
"--url": true,
"--classify": true,
"--summary": true
},
"notice": "Generated with ScanCode and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied. No content created from\nScanCode should be considered or used as legal advice. Consult an Attorney\nfor any legal advice.\nScanCode is a free software code scanning tool from nexB Inc. and others.\nVisit https://github.com/nexB/scancode-toolkit/ for support and download.",
"start_timestamp": "2024-08-26T121530.202405",
"end_timestamp": "2024-08-26T121759.270647",
"output_format_version": "3.2.0",
"duration": 149.06851434707642,
"message": null,
"errors": [],
"warnings": [],
"extra_data": {
"system_environment": {
"operating_system": "linux",
"cpu_architecture": "64",
"platform": "Linux-6.6.32-linuxkit-x86_64-with-glibc2.36",
"platform_version": "#1 SMP PREEMPT_DYNAMIC Thu Jun 13 14:14:43 UTC 2024",
"python_version": "3.12.4 (main, Jul 23 2024, 07:23:20) [GCC 12.2.0]"
},
"spdx_license_list_version": "3.24",
"files_count": 694
}
}
],
```

### System configuration

> For bug reports, it really helps us to know:

* What OS are you running on? (Windows/MacOS/Linux)
see above
* What version of scancode-toolkit was used to generate the scan file?
see above
* What installation method was used to install/run scancode? (pip/source download/other)
see above

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.