aboutcode-org / aboutcode-org/scancode-toolkit

False positive: LGPL-2.1 file detected as "LGPL-3.0-only AND GPL-1.0-or-later"

Abierto
#4,992 8 comentarios 0 reacciones 0 asignados Ver en GitHub
bug
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

### Description

Scanning `src/yp_order.c` from `libnsl` v2.0.1 reports `LGPL-3.0-only AND GPL-1.0-or-later`.
and "identifier": "lgpl_3_0_and_gpl_1_0_plus-d1207106-f72f-146f-6eb1-6008c11de4ee",

The file header states that the file is under GNU Lesser General Public License in version 2.1

Source file:
https://github.com/thkukuk/libnsl/blob/v2.0.1/src/yp_order.c

Expected license detection: `LGPL-2.1-only`

Actual license detection: `LGPL-3.0-only AND GPL-1.0-or-later`

This appears to be a false positive caused by the license text mentioning "GNU Lesser General Public License" and later "GNU General Public License" in the warranty/copy notice text, even though the version stated in the header is LGPL version 2.1.

### How To Reproduce

```bash
wget https://github.com/thkukuk/libnsl/archive/refs/tags/v2.0.1.zip
unzip v2.0.1.zip
scancode --license --json-pp result.json libnsl-2.0.1/src/yp_order.c
```

### System configuration

OS: macOS 26.3.1 (x86_64)
ScanCode Toolkit version: 32.5.0
Installation method: pip

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.