Skip to content

False positive detection with apache-1.1_37_1.RULE #3366

Description

@DennisClark

A recent scan of about.html in project org.osgi.service.cdi-1.0.0.jar detected apache-1.1 with a score of 73.68 using apache-1.1_37_1.RULE. The about.html file is very clearly a declaration of the apache-2.0 license (also detected, correctly). I believe that the problem is probably caused by the lack of requiring specific text in the RULE. Here is the relevant text in apache-1.1_37_1.RULE:

Apache Software License 1.1 (available at <a href="http://www.apache.org/licenses/LICENSE">http://www.apache.org/licenses/LICENSE

I think that the problem could be resolved by requiring a match on 1.1 or perhaps even Apache Software License 1.1 which would avoid the false positive on the following matched text in the about.html file:

"matched_text":"available at http://www.apache.org/licenses/LICENSE-"

There is nothing about apache-1.1 in the actual matched text.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

buglicense-reviewA license detection issue that needs review

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions