librariesio / libraries.io

:books: The Open Source Discovery Service
https://libraries.io
GNU Affero General Public License v3.0
1.11k stars 202 forks source link

wrong license detected #2541

Open obfusk opened 4 years ago

obfusk commented 4 years ago

Problem: https://libraries.io/pypi/jiten is licensed under AGPLv3+ but detected as Other. Diagnosis: Spdx.find works for GPLv3, GPLv3+, AGPLv3 but not AGPLv3+. Also: https://libraries.io/licenses/Other redirecting to https://libraries.io/licenses/GPL-3.0+ seems odd; explained by Spdx.find('other').id == "GPL-3.0+".

Problem: https://libraries.io/cargo/proudcat is licensed under GPL-3.0-or-later but detected as CNRI-Python-GPL-Compatible. Diagnosis: project.rb does a .split("or") which results in searching for GPL-3.0- (finding CNRI-Python-GPL-Compatible) and -later (not found & discarded).

dschwoerer commented 3 years ago

Similar problem: https://libraries.io/pypi/eudist/0.1.2 is licensed as GPLv3(+) but detected as GPLv2+

obfusk commented 3 years ago

Update:

https://libraries.io/pypi/jiten is now detected as AGPL-3.0, which is at least almost correct (since it's AGPL-3.0-or-later).

https://libraries.io/cargo/proudcat is correctly listed as GPL-3.0-or-later now :)

obfusk commented 3 years ago

Similar problem: https://libraries.io/pypi/eudist/0.1.2 is licensed as GPLv3(+) but detected as GPLv2+

I see GPL-3.0 right now, so that seems better than before.