Armijn Hemel

DOS/32 Advanced DOS Extender Software License (4 clause BSD/Apache 1.1 hybrid)

2

### Description A possibly interesting BSD variant: https://github.com/open-watcom/open-watcom-v2/blob/master/bld/redist/dos32a/license.d32 https://dos32a.narechk.net/content/license.html It is a lot like a 4 clause BSD license, except it uses some different wording lifted from Apache 1.1: ```...

Cross correlate results from old Scancode with results from current Scancode to find regressions using Software Heritage licenses dump

2

## Short Description Software Heritage has a dump of many license artifacts at . All of these licenses were scanned with an earlier version of Scancode (assuming a version from...

## Short Description ## Possible Labels Process Pronom DROID Signature files as an alternative to using `libmagic` for quick and dirty identification of binary files so those can be skipped...

### Description https://github.com/hermescenter/monitorapa/blob/main/LICENSE.txt This is not a free software license: https://github.com/hermescenter/monitorapa/issues/39

Import Global Security Database

3

It might be useful to harvest the Global Security Database, a new project: https://globalsecuritydatabase.org/ https://github.com/cloudsecurityalliance/gsd-database Data is CC0-1.0 licensed.

the Dutch national cyber security center publishes its own numbering scheme: https://advisories.ncsc.nl/ There is an RSS feed, as well as a page with all the advisories. An advisory is published...

import information from MalwareBazaar

1

MalwareBazaar has information about various malware files, including various hashes (md5, sha1, sha256, ssdeep, imphash, tlsh). Though no CVE identifiers are linked it is an easy to process data format...

collect DIVD CSIRT cases

1

Dutch Intitute for Vulnerability Disclosure (DIVD) has its own numbering scheme. https://csirt.divd.nl/cases/ Not all of these are mapped to CVEs. Some of these are related to actual code issues, but...

legacy file format support

7

Currently python-lz4 does not seem to support the legacy file format: https://github.com/lz4/lz4/blob/master/doc/lz4_Frame_format.md#legacy-frame This particular format, while discouraged by the LZ4 authors, is actually still in use, for example in the...

It would be good to add SPDX short identifiers to the headers of each file to make it easier for license detection tools: https://spdx.org/ids Recently some big projects, such as...