aboutcode-org / aboutcode-org/scancode-toolkit

Consider package context and default licenses to resolve unknown licenses and license versions (like for the GPL)

未关闭
#3,920 0 条评论 0 个 reaction 已指派 1 人 已被 @AyanSinhaMahapatra 认领 在 GitHub 查看
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

We should design a way to reuse a package context (with its declared, top level licensing) to inform the resolution of mildly ambiguous license and unknown references found in the same code tree.
This would put in code the principle that a top level; declared licenses applies to the package unless otherwise noted and that it also informs some ambiguities.

For instance, say we have a package with a top level GPL-2.0 license. The file-level notices of `license under the GPL` could be resolved to GPL-2.0 instead of GPL-1.0-or-later. This is akin to resolve a file reference, but using a top level license instead, and a slightly broader approach.

We could also provide a CLI option to provide the default as an expression.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。