scancode-toolkit

scancode-toolkit copied to clipboard

Update DatafileHandler default methods

1

This PR updates `DatafileHandler.assemble()` and `DatafileHandler.assemble_from_many()` to yield Packages, Dependencies, and Resources before associating Packages to Resources using a `package_adder`. This is to help with using packagedcode Package handlers in...

JonoYang

RFC: Primary License. Create and maintain a primary declared_license_expression field.

7

Note that package.declared_license can be any data structure. It has been confusing to several because "declared license" is used differently by other orgs, such as SPDX. Rename to: **extracted_license_statement** The...

chinyeungli

We have Contributor License agreements as licenses/rules in scancode and we should consider if we report these instead as `license_clues` instead of adding them in `license_detections` proper. The steps discussed...

AyanSinhaMahapatra

packagecode: gradle nebula dependency lock parser

5

## Short Description gradle is a build tool for the ajva ecosystem especially popular in android apps. nebula gradle dependency lock allows developer to lock their gradle dependencies and sub...

tardyp

Detect new NuGet license URLs with expressions

1

Following discussions in https://github.com/nexB/scancode-toolkit/issues/2877 there is service: https://docs.microsoft.com/en-us/nuget/nuget-org/licenses.nuget.org Therefore we can have SPDX expressions of this shape `https://licenses.nuget.org/(LGPL-2.0-only WITH FLTK-exception OR Apache-2.0+)` We should extend the matcher used to detect...

pombredanne

Improve gibberish license/copyright detection

10

I have compiled a text file that contains erroneous copyright detection values. I have removed quote characters and separated each copyright value by several lines. [bad-copyright-detections.txt](https://github.com/nexB/scancode-toolkit/files/5985058/bad-copyright-detections.txt)

JonoYang

False positive AGPL detection from a mere URL

3

We are detecting an AGPL with `agpl-3.0-plus_152.RULE` and this text `http://www.ghostscript.com` ... for instance from https://github.com/ReactiveX/rxjs/blob/6.x/README.md This is noisy. There are two ways out: 1. remove these short URL and...

pombredanne

We want to reuse the code from the `assembly()` method of the different `PackageHandler`s in scancode.io, and the current method of associating Packages to Resources (in the `assembly()` methods), where...

JonoYang

devcontainer: Base python 3.10.2 devcontainer

3

Use VSCode devcontainer infrastructure to allow remote or containerized development to avoid install multiple depenencies on host machine Installed: - python 3.10.2 ( base official Docker image on debian Bullseye...

heliocastro

These are valuable package information https://pypi.org/project/pyaxmlparser/ @ https://github.com/appknox/pyaxmlparser does a nice job

pombredanne