aboutcode-org / aboutcode-org/scancode-toolkit

LGPL false positive (should be GPL)

Open
#4,946 1 comment 0 reactions 1 assignee Assigned to @AyanSinhaMahapatra View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description

https://github.com/rpm-software-management/rpm/blob/master/scripts/vpkg-provides.sh#L7

has a clear GPL license text, but is recognized as LGPL with exception:

```
{
"path": "rpm/scripts/vpkg-provides.sh",
"type": "file",
"detected_license_expression": null,
"detected_license_expression_spdx": null,
"license_detections": [],
"license_clues": [
{
"license_expression": "lgpl-2.0-plus WITH ocaml-lgpl-linking-exception",
"license_expression_spdx": "LGPL-2.0-or-later WITH OCaml-LGPL-linking-exception",
"from_file": "rpm/scripts/vpkg-provides.sh",
"start_line": 7,
"end_line": 7,
"matcher": "3-seq",
"score": 46.04,
"matched_length": 13,
"match_coverage": 54.17,
"rule_relevance": 85,
"rule_identifier": "lgpl-2.0-plus_with_ocaml-lgpl-linking-exception_1.RULE",
"rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/lgpl-2.0-plus_with_ocaml-lgpl-linking-exception_1.RULE"
}
],
"percentage_of_license_text": 0.88,
"scan_errors": []
},
```

I would suggest tightening the rule and adding some required phrases.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.