aboutcode-org / aboutcode-org/scancode-toolkit

Consider package context and default licenses to resolve unknown licenses and license versions (like for the GPL)

Aberta
#3,920 0 comentários 0 reações 1 responsável Reivindicada por @AyanSinhaMahapatra Ver no GitHub
Linguagem predominante
Python
Estrelas
2.6k
Forks
791
Merge médio
1d 12h
PRs com merge (30d)
5

Descrição

We should design a way to reuse a package context (with its declared, top level licensing) to inform the resolution of mildly ambiguous license and unknown references found in the same code tree.
This would put in code the principle that a top level; declared licenses applies to the package unless otherwise noted and that it also informs some ambiguities.

For instance, say we have a package with a top level GPL-2.0 license. The file-level notices of `license under the GPL` could be resolved to GPL-2.0 instead of GPL-1.0-or-later. This is akin to resolve a file reference, but using a top level license instead, and a slightly broader approach.

We could also provide a CLI option to provide the default as an expression.

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.