clearlydefined / clearlydefined/service

Incorrectly including LicenseRef-scancode-generic-cla in the "Declared" field

Open
#1,276 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
51
Forks
46
PR merge metrics
No merged PRs in 30d

Description

ClearlyDefined is meant to report the component's "top level" license information in the "Declared" field. ClearlyDefined is incorrectly including "LicenseRef-scancode-generic-cla" in the "Declared" field when there's mention of the project using a CLA. The fact a project uses or references a CLA for _contributions_ is not information that should be included in the component's "Declared" field.

Example: https://clearlydefined.io/definitions/nuget/nuget/-/Microsoft.Kiota.Serialization.Form/1.13.1. The README mentions a CLA for contributions. The actual "Declared" license is MIT. The only thing in the "Declared" field should be "MIT."

![Image](https://github.com/user-attachments/assets/43626ab2-cdf9-4bb0-8a46-bad18968e77b)

Thousands of components are impacted by this. Here's a partial list of other components with this issue.

nuget/nuget/-/microsoft.kiota.serialization.form/1.13.1
nuget/nuget/-/microsoft.extensions.azure/1.7.6
nuget/nuget/-/azure.security.keyvault.secrets/4.7.0
pypi/pypi/-/azure-keyvault-certificates/4.9.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk/azcore/v1.16.0
nuget/nuget/-/azure.messaging.servicebus/7.18.2
nuget/nuget/-/azure.ai.openai/2.1.0-beta.1
pypi/pypi/-/azure-ai-ml/1.21.1
pypi/pypi/-/azure-monitor-opentelemetry-exporter/1.0.0b31
nuget/nuget/-/microsoft.openapi/1.6.22
npm/npmjs/@microsoft/applicationinsights-clickanalytics-js/3.3.3
npm/npmjs/@vscode/test-web/0.0.62
git/github/microsoft/appcenter-sdk-android/2b0278445e55f17ab389736fb3b82b24b53e6412
npm/npmjs/@azure/msal-node-extensions/1.3.0
npm/npmjs/-/microsoft-cognitiveservices-speech-sdk/1.41.0
nuget/nuget/-/azure.security.keyvault.certificates/4.7.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fsecurity%2Fkeyvault/internal/v1.1.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fazidentity/cache/v0.3.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk/azidentity/v1.8.0
nuget/nuget/-/azure.ai.language.text/1.0.0-beta.1
npm/npmjs/@vscode/policy-watcher/1.1.8
npm/npmjs/-/custom-functions-metadata-plugin/1.7.2
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fsecurity%2Fkeyvault/azcertificates/v1.2.0
nuget/nuget/-/azure.resourcemanager.computeschedule/1.0.0-beta.1
nuget/nuget/-/azure.resourcemanager.containerregistry/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.eventhubs/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.managedserviceidentities/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.hybridcompute/1.0.0-beta.6
nuget/nuget/-/azure.resourcemanager.iothub/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.operationalinsights/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.logic/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.compute/1.7.0-beta.1
nuget/nuget/-/microsoft.garnet/1.0.29
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fresourcemanager%2Fservicenetworking/armservicenetworking/v1.1.0-beta.2
go/golang/github.com%2Fmicrosoft/moc-sdk-for-go/v0.23.3
go/golang/github.com%2Fmicrosoft/moc/v0.23.0
go/golang/github.com%2Fmicrosoft/moc-sdk-for-go/v0.23.0
go/golang/github.com%2Fmicrosoft/moc/v0.23.1
go/golang/github.com%2Fzmvictor/frameworkcontroller/v1.0.2-0.20220518192522-c82d43f32f4f
nuget/nuget/-/azure.security.keyvault.keys/4.7.0
nuget/nuget/-/azure.messaging.eventgrid/4.27.0
nuget/nuget/-/azure.health.deidentification/1.0.0-beta.1
nuget/nuget/-/microsoft.azure.webpubsub.aspnetcore/1.4.0
nuget/nuget/-/microsoft.kiota.authentication.azure/1.13.1
nuget/nuget/-/microsoft.kiota.http.httpclientlibrary/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.multipart/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.text/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.json/1.13.1
nuget/nuget/-/system.clientmodel/1.2.1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.