aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect license expression normalization for AND / OR combinations

Open
#4,690 5 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description

When ScanCode detects files with combined license expressions involving Apache-2.0 and MIT, the resulting license expression appears to be incorrectly normalized or simplified.

For a license statement such as

> licensed under Apache-2.0 AND MIT

ScanCode reports only apache-2.0, omitting MIT entirely.

For a license statement such as

> licensed under Apache-2.0 OR MIT

ScanCode reports the expression as: apache-2.0 AND (apache-2.0 OR mit)

### How To Reproduce

scan files with statement as follows

> licensed under Apache-2.0 AND MIT

and

> licensed under Apache-2.0 OR MIT

> scancode --license --json-pp scancode.json .

### System configuration

OS: macOS 15.6.1 (x86_64)
ScanCode Toolkit version: 32.4.1
Installation method: pip

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.