license-expression
license-expression copied to clipboard
nexB
Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.
is here where we need fill in the License tag ? ``` Using detector: trivy Traceback (most recent call last): File "/usr/bin/go_vendor_license", line 8, in sys.exit(main()) ^^^^^^ File "/usr/lib/python3.11/site-packages/go_vendor_tools/cli/go_vendor_license.py", line...
Hi! :wave: As background: I have added this project as backend for [namcap](https://gitlab.archlinux.org/pacman/namcap), a validation tool for packages and build scripts, that is used on Arch Linux. From what I...
Hi `license-expression`. I must begin that this is a great piece of software, and I'm grateful for your contributions. I noticed a strange edge case when using the spdx license...
The documentation for the SPDX License List states: > "When a license identifier is "deprecated" on the SPDX License List, it effectively means that there is an updated license identifier...
The `master` branch implementation treats "or later" licenses as separate keys with an eventual aliases. The `alternate-or-later-handling` [branch](https://github.com/nexB/license-expression/tree/alternate-or-later-handling) implementation treats "or later" as keywords and not as separate license keys....
Hi, I am trying to validate a given `LicenseExpression` using `get_spdx_licensing().validate()`. This is very helpful in providing a list of unknown symbols not on the SPDX License and Exception Lists....
Tern uses license-expression to validate SPDX licenses. When an invalid license key is provided (i.e. contains invalid characters like `/` or `,`), license-expression throws an error when it should handle...
`licensing.validate()` has `'Unknown license key(s)'` error for GPL licenses, e.g. `'LGPLv2.1'`, `'GPLv2'`, `'GPL2'`. Side note: Also some images have several licenses, e.g. `MIT`, `GPL2` and others. When they are listed...
For example `licensing.dedup()` should have simplified the following expression: `(gpl AND mit) AND mit AND (gpl OR mit)` -> `gpl AND mit AND (gpl OR mit)` But currently it does...
This would be useful in the case where we want to remove an invalid license key from a license expression without converting that license expression to a string, then removing...
