aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
https://aboutcode.org/scancode/
2.12k stars 547 forks source link

Add (hidden) RFC license #3906

Open LeChasseur opened 1 month ago

LeChasseur commented 1 month ago

The database already contains LicenseRef-scancode-ietf . This seems to be the license for much IETF content but there are sometimes other licenses as well. Example: Punicode (https://datatracker.ietf.org/doc/html/rfc3492) seems to be under LicenseRef-scancode-ietf which is indicated on the last page (https://datatracker.ietf.org/doc/html/rfc3492#page-35). This is not a FOSS license. However, there is another license that covers the sample code: https://datatracker.ietf.org/doc/html/rfc3492#page-22 ... Disclaimer and license

Regarding this entire document or any portion of it (including the pseudocode and C code), the author makes no guarantees and is not responsible for any damage resulting from its use. The author grants irrevocable permission to anyone to use, modify, and distribute it in any way that does not diminish the rights of anyone else to use, modify, and distribute it, provided that redistributed derivative works do not contain misleading author or version information. Derivative works need not be licensed under similar terms. ... I haven't found an identifier for it. LicenseRef-scancode-ietf-rfc3492 might be suitable.

DennisClark commented 1 month ago

@AyanSinhaMahapatra I have added LicenseRef-scancode-ietf-rfc3492 to DejaCode. Permissive. Please synch the new definition and create corresponding detection rules, thanks!

AyanSinhaMahapatra commented 5 days ago

@DennisClark this seems to be a duplicate of https://scancode-licensedb.aboutcode.org/punycode.html, can you check?

DennisClark commented 5 days ago

@AyanSinhaMahapatra thank you for identifying the duplicate license. I have updated DejaCode as follows:

I greatly appreciate your due diligence checking on the duplication.