aboutcode-org / aboutcode-org/scancode-toolkit

New tool - redistribution check suggestion

未關閉
#724 7 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
enhancement
主要語言
Python
星號
2.6k
分支
791
平均合併
1 天 12 小時
30 天內合併 PR
5

描述

Given that an audited codebase is different from what is redistributed, part of my job is to scan the redistribution. I run it through extractcode/scancode (only-findings) and produce a json-pp file which I manually go through. These are usually over 100MB. For example, I look for “GPL 3”, “Commercial”, “Restricted”, “Proprietary”, “Patent” and other company important licenses. I also look for jars without source jars. This is rudimentary but catches a surprising number of errors. It’s also time consuming.

It would be more efficient to be able to remove items from the output that cause uninteresting hits. For example,
Binutils
Gdb
.txt, COPYING, Whence, html, … files
LC_MESSAGES/
Testsuite/
Fonts
Etc.
Files that have multiple licenses where one of them is gplv2 or a very permissive license.

Perhaps I've included too many details but I hope I've conveyed the need for some sort of tool help.

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。