fsfe / reuse-tool

reuse is a tool for compliance with the REUSE recommendations.
https://reuse.software
396 stars 148 forks source link

DEP5 matches too eagerly #900

Open carmenbianca opened 9 months ago

carmenbianca commented 9 months ago

Below text by Chris Pressey:

I have encountered what certainly appears to be a bug in version 3.0.1 of the reuse tool. I am reporting it here because I don't use GitHub (and thank you for working towards getting REUSE off of it.)

The bug has something to do with having multiple entries in the .reuse/dep5 file, and spaces in filenames. It manifests as reporting that the file distribution is REUSE 3.0-compliant when in fact some files contain no license or copyright information. I have not yet ascertained whether the flaw is in the debian.copyright library that loads the dep5 file, or in the reuse code itself.

A nearly minimal example which triggers it can be found here:

https://codeberg.org/cpressey/reuse-failure-case

Thank you, -Chris


Upstream bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062437

carmenbianca commented 8 months ago

This is an upstream bug. I will report it upstream and link to it here.

carmenbianca commented 8 months ago

The bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062437