A recent scan of CHANGELOG.md in package which-2.0.2.tgz returned a detection of unknown-license-reference with a score of 80 on the unknown-license-reference_332.RULE which is based on this rule text: {{License 1.0}}
The problem is that the actual text in the CHANGELOG.md file, starting at line 135, is this:
## v1.0.6
* isc license
## 1.0.5
* Awful typo
Since standard license detection behavior is to ignore punctuation, one can see why this would happen, but it is definitely a false positive detection, although I am afraid I do not have (yet) a good suggestion for an approach to fix this problem. Basically the unknown license should not have been detected and reported at all.
A recent scan of
CHANGELOG.mdin packagewhich-2.0.2.tgzreturned a detection of unknown-license-reference with a score of 80 on the unknown-license-reference_332.RULE which is based on this rule text:{{License 1.0}}The problem is that the actual text in the CHANGELOG.md file, starting at line 135, is this:
Since standard license detection behavior is to ignore punctuation, one can see why this would happen, but it is definitely a false positive detection, although I am afraid I do not have (yet) a good suggestion for an approach to fix this problem. Basically the unknown license should not have been detected and reported at all.