google / go-licenses

A lightweight tool to report on the licenses used by a Go package and its dependencies. Highlight! Versioned external URL to licenses can be found at the same time.
Apache License 2.0
790 stars 117 forks source link

align license detection with golang.org/x/pkgsite/internal/licenses #275

Open tmc opened 2 weeks ago

tmc commented 2 weeks ago

The results of this tool and what shows up for a package on pkg.go.dev don't always line up.

My sense is that https://pkg.go.dev/golang.org/x/pkgsite/internal/licenses is more robust wrt detection logic and having these tools aligned would be beneficial.

tmc commented 2 weeks ago

An example:

https://pkg.go.dev/github.com/DataDog/sketches-go/ddsketch - Unknown | Unknown by this tool, and (IMO appropriately) reported as Apache 2.0 here: https://pkg.go.dev/github.com/DataDog/sketches-go/ddsketch