Obvious `mit` text is detected as unknown-license-reference

[Loki-Afro]

Description

https://github.com/tj/node-cookie-signature with tag 1.2.2 is being identified as LicenseRef-scancode-unknown-license-reference AND MIT

is this a scancode issue, is node-cookie-signature s fault?
this is a very similar issue #4387

How To Reproduce

git clone git@github.com:tj/node-cookie-signature.git
git checkout 1.2.2
scancode --license --json-pp /tmp/results.json node-cookie-signature

results in

{                                                                                                                                                                                                                                                                                                         12:17:53 [25/312]
      "path": "node-cookie-signature/Readme.md",
      "type": "file",
      "detected_license_expression": "unknown-license-reference AND mit",
      "detected_license_expression_spdx": "LicenseRef-scancode-unknown-license-reference AND MIT",
      "license_detections": [
        {
          "license_expression": "unknown-license-reference AND mit",
          "license_expression_spdx": "LicenseRef-scancode-unknown-license-reference AND MIT",
          "matches": [
            {
              "license_expression": "mit",
              "spdx_license_expression": "MIT",
              "from_file": "node-cookie-signature/Readme.md",
              "start_line": 19,
              "end_line": 23,
              "matcher": "2-aho",
              "score": 100.0,
              "matched_length": 4,
              "match_coverage": 100.0,
              "rule_relevance": 100,
              "rule_identifier": "mit_1187.RULE",
              "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_1187.RULE"
            },
            {
              "license_expression": "unknown-license-reference",
              "spdx_license_expression": "LicenseRef-scancode-unknown-license-reference",
              "from_file": "node-cookie-signature/Readme.md",
              "start_line": 23,
              "end_line": 23,
              "matcher": "2-aho",
              "score": 100.0,
              "matched_length": 5,
              "match_coverage": 100.0,
              "rule_relevance": 100,
              "rule_identifier": "unknown_10.RULE",
              "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/unknown_10.RULE"
            },
            {
              "license_expression": "mit",
              "spdx_license_expression": "MIT",
              "from_file": "node-cookie-signature/LICENSE",
              "start_line": 1,
              "end_line": 1,
              "matcher": "2-aho",
              "score": 100.0,
              "matched_length": 3,
              "match_coverage": 100.0,
              "rule_relevance": 100,
              "rule_identifier": "mit_27.RULE",
              "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_27.RULE"
            },
            {
              "license_expression": "mit",
              "spdx_license_expression": "MIT",
              "from_file": "node-cookie-signature/LICENSE",
              "start_line": 5,
              "end_line": 22,
              "matcher": "2-aho",
              "score": 100.0,
              "matched_length": 161,
              "match_coverage": 100.0,
              "rule_relevance": 100,
              "rule_identifier": "mit.LICENSE",
              "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/licenses/mit.LICENSE"
            }
          ],
          "identifier": "unknown_license_reference_and_mit-79e5d109-e53e-7f7e-d7f6-4881eea3c394",
          "detection_log": [
            "unknown-reference-to-local-file"
          ]
        }
      ],

System configuration

For bug reports, it really helps us to know:

• What OS are you running on? (Windows/MacOS/Linux)
  Fedora 42

• What version of scancode-toolkit was used to generate the scan file?

zarathustra@esel ~ % scancode --version
ScanCode version: 32.2.0
ScanCode Output Format version: 3.2.0
SPDX License list version: 3.24

• What installation method was used to install/run scancode? (pip/source download/other)
  dnf

[Jayant-kernel]

"Hi @Loki-Afro,

I successfully reproduced this issue locally
Scanning node-cookie-signature results in: detected_license_expression: unknown-license-reference AND mit

I am investigating the specific rule causing this false positive and I will submit a PR to fix it.

[emilygrimaldo]

Hi @Loki-Afro I’m a student contributing to ScanCode Toolkit through SOSE. Would you be open to a short chat about how you used ScanCode and the issue you ran into here? I’m trying to learn more about user experiences. Thanks!