aboutcode-org / aboutcode-org/scancode.io

Support correct detection of conflicting but compatible licenses in a package with a hierarchy of evidence

Offen
#742 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
215
Forks
203
Ø Merge
4 T. 8 Std.
Gemergte PRs (30 T.)
6

Beschreibung

When I scan https://github.com/garycourt/uri-js there is:
- a BSD-2-Clause tag in the package.json https://github.com/garycourt/uri-js/blob/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae/package.json#L56
- and a license is in fact a BSD-2-Clause-Views https://github.com/garycourt/uri-js/blob/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae/LICENSE

We should have ways to report a correct BSD-2-Clause-Views only using either data stored in licenses to also deal with LGPL and LGPL 2.1 style of combos. Or infer that all of BSD-2-Clause-Views is in BSD-2-Clause and therefore the later applies because it has more terms, and/or that the that the tag BSD-2-Clause is not as string a license clue as a full BSD-2-Clause-Views text

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.