clearlydefined / clearlydefined/service

interpret licenses for missing versions

Open
#1,098 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
51
Forks
46
PR merge metrics
No merged PRs in 30d

Description

### Description

If a license is requested for a package that exists in ClearlyDefined data but the specific version requested does not have data, interpret the license from the existing data.

The interpreted license will be each identified license for all versions `AND` together and including `AND LicenseRef-clearlydefined-NODATA`. In this way, we do not have do figure out where in the list of versions the requested version lies and attempt to determine which license applies if there are multiple licenses. The `LicenseRef-clearlydefined-NODATA` tells the consumer that there was no license data for this specific coordinates (package + version) and the return license was interpreted.

Examples...

* a dependency where all licenses are `MIT` for all versions and a new version appears, it is interpreted as `MIT AND LicenseRef-clearlydefined-NODATA`

* a dependency where early versions were `Apache-2.0` and later versions were `MIT`, the interpreted license will be `Apache-2.0 AND MIT AND LicenseRef-clearlydefined-NODATA`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.