Stefano Bennati

[BUG] Section titles in Code Analysis are too short

1

**Describe the bug** Section titles are too short to be distinguished properly. **To Reproduce** Open the Code Analysis pane of one project with both `Java Database Connector (Write)` and `Java...

Scancode confuses files with similar names

11

Scanning a folder containing only two files `COPYING` and `COPYING.LGPLv2.1` (see [files.zip](https://github.com/nexB/scancode-toolkit/files/14095926/files.zip) ) Scancode detects license LGPL in file `COPYING` at line 502, but `COPYING` has only 66 lines while...

Bundler fails to parse dependency "NoSuchElementException: Key spoon is missing in the map."

13

One of our projects gets the following scan issue: `Failed to parse dependency 'spoon' of project 'Bundler::Gemfile:' in '/builds/oss/oss-review-toolkit/ort-gitlab-ci/project': NoSuchElementException: Key spoon is missing in the map.` I was able...

Nested provenance cannot be resolved because SVN path is not found

8

When scanning https://github.com/apache/maven-doxia/tree/doxia-1.1.2/doxia-core The scanner returns the following error: ``` Could not resolve nested provenance for package 'Maven:xml-apis:xml-apis:1.3.03': SVNException: svn: E160005: Target path '/xerces/xml-commons' does not exist svn: E175002: REPORT...

Analyzer confuses Cargo dependency hosted in repo for a source artifact

3

When running the analyzer (revision 2b230b8) on a Cargo project, a dependency which is hosted in a git repo is identified as source artifact. The analyzer result contains the following:...

Handle ScanCode findings that are actually references to other files

3

Scanning a gitrepo project with the following manifest ``` ``` where folder `external/xz` contains only four files, named `COPYING`, `COPYING.GPLv2`, `COPYING.GPLv3` and `COPYING.LGPLv2.1` (see [copying.zip](https://github.com/oss-review-toolkit/ort/files/14087714/copying.zip) ) ORT detects the following:...

Scanner is taking much longer and fails to fetch packages

4

We noticed significant slowdowns in scans: the scanner hours to scan projects that previously took minutes. This can be reproduced with [MoveTK](https://github.com/movetk/movetk), latest version. Description: The scanner starts it's normal...

Declared license mapping curations are not applied correctly when scanning a git-repo project: Adding a curation to map "Dual license: Apache or Proprietary" to "Apache-2.0 AND BSD-3-Clause" does not work...

Parse error at "'# Note: '": Expected W:(0-9A-Za-z)

4

python inspector 0.9.8 fails to parse a requirements.txt file containing: ``` molecule==2.22 taskcat==0.9.20 ``` This error does not happen with python inspector 0.9.4 Stacktrace: ``` > python-inspector --python-version 310 --operating-system...