Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

false positive: ScanSoft Public License #734

Closed
armijnhemel opened this issue Aug 22, 2017 · 4 comments
Closed

false positive: ScanSoft Public License #734

armijnhemel opened this issue Aug 22, 2017 · 4 comments

Comments

@armijnhemel
Copy link
Contributor

https://github.com/OData/odata.net/blob/master/src/AssemblyInfo/AssemblyInfoCommon.cs

is recognized as ScanSoft Public License. The 'License.txt' file they refer to actually contains MIT

@pombredanne
Copy link
Member

Thanks!
This is what is detected with ./scancode -l -f json-pp --diag --license-text:

 "files": [
    {
      "path": "scancode-toolkit/t",
      "scan_errors": [],
      "licenses": [
        {
          "key": "scansoft-1.2",
          "score": 46.67,
          "short_name": "ScanSoft Public License 1.2",
          "category": "Permissive",
          "owner": "Nuance Communications",
          "homepage_url": "http://www.speech.cs.cmu.edu/openvxi/OpenVXI_3.0/OpenSpeech_Browser_PIK/doc/License.txt",
          "text_url": "http://www.speech.cs.cmu.edu/openvxi/OpenVXI_3.0/OpenSpeech_Browser_PIK/doc/License.txt",
          "dejacode_url": "https://enterprise.dejacode.com/urn/urn:dje:license:scansoft-1.2",
          "spdx_license_key": "",
          "spdx_url": "",
          "start_line": 31,
          "end_line": 31,
          "matched_rule": {
            "identifier": "scansoft-1.2_4.RULE",
            "license_choice": false,
            "licenses": [
              "scansoft-1.2"
            ],
            "matcher": "3-seq",
            "rule_length": 58,
            "matched_length": 7,
            "match_coverage": 12.07,
            "rule_relevance": 100
          },
          "matched_text": "registered trademarks or trademarks of [Microsoft] [Corporation] [in] [the] [U].[S]. [and]/[or] other countries"
        }
      ]
    }
  ]

The detection trigger is this:
[assembly: AssemblyTrademark("Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the U.S. and/or other countries.")]

This could be returned as its own license like a "trademark notice" of sorts or ignored entirely as this is not really a license statement at all.

The second item is the See License.txt in the project root for license information. mention. This is not enough to detect a MIT license for now short of having a license inference capability as described in #377 and is not reported either yet (this is a known thing until we have a proper #377 )
So I suggest to return this as an unknown license for now.

What do you think for these two?

@armijnhemel
Copy link
Contributor Author

armijnhemel commented Aug 22, 2017

But it is not even a license statement. It seems to be some templating code when the code is used to generate a .NET assembly and put into the generated code (I think). So it doesn't apply to the current file at all.

pombredanne added a commit that referenced this issue Oct 21, 2017
 * this is a fix for #734 to ensure that bare trademark
   mentions are not picked up alone as approximate matches

Signed-off-by: Philippe Ombredanne <[email protected]>
susg pushed a commit to susg/scancode-toolkit that referenced this issue Jan 20, 2018
 * this is a fix for aboutcode-org#734 to ensure that bare trademark
   mentions are not picked up alone as approximate matches

Signed-off-by: Philippe Ombredanne <[email protected]>
yash-nisar pushed a commit to yash-nisar/scancode-toolkit that referenced this issue Feb 8, 2018
 * this is a fix for aboutcode-org#734 to ensure that bare trademark
   mentions are not picked up alone as approximate matches

Signed-off-by: Philippe Ombredanne <[email protected]>
@pombredanne
Copy link
Member

This is fixed in develop

@pombredanne
Copy link
Member

And available also in the latest released tags ! thanks

pombredanne pushed a commit that referenced this issue Jul 14, 2021
Recognize single > as a prompt in doscon
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants