clearlydefined / clearlydefined/service
interpret licenses for missing versions
- Dominant language
- TypeScript
- Stars
- 51
- Forks
- 46
- PR merge metrics
- No merged PRs in 30d
Description
### Description
If a license is requested for a package that exists in ClearlyDefined data but the specific version requested does not have data, interpret the license from the existing data.
The interpreted license will be each identified license for all versions `AND` together and including `AND LicenseRef-clearlydefined-NODATA`. In this way, we do not have do figure out where in the list of versions the requested version lies and attempt to determine which license applies if there are multiple licenses. The `LicenseRef-clearlydefined-NODATA` tells the consumer that there was no license data for this specific coordinates (package + version) and the return license was interpreted.
Examples...
* a dependency where all licenses are `MIT` for all versions and a new version appears, it is interpreted as `MIT AND LicenseRef-clearlydefined-NODATA`
* a dependency where early versions were `Apache-2.0` and later versions were `MIT`, the interpreted license will be `Apache-2.0 AND MIT AND LicenseRef-clearlydefined-NODATA`
Contributor guide
Assessment
This issue has not been assessed yet.