Bug#1051840: licensecheck: Incorrect license reported for appstream metadata

Jonas Smedegaard jonas at jones.dk
Wed Sep 13 18:38:31 BST 2023


Control: retitle -1 licensecheck: file parsing: extract metadata from appstream

Hi Peter,

Quoting Peter B (2023-09-13 12:54:15)
> Appstream metadata files have two license fields;
> 1) <metadata_license>
> 2) <Project_license>
> 
> The license for the file itself is the metadata license,
> but licensecheck reports using the project license.
> 
> Example here
> https://salsa.debian.org/debian/strawberry/-/blob/master/dist/unix/org.strawberrymusicplayer.strawberry.appdata.xml
> 
> File license is CC0-1.0, but licensecheck reports GPL.
> 
> 
> Note, also the project license is GPL-3+, not just GPL.

Thanks for reporting this!

Licensecheck does not even report "using the project license": It
recognizes neither of those license fields, as revealed by this command:

  TRACE=1 licensecheck dist/unix/*.appdata.xml

..which hints of a discovery at lines 946-964, which is "released under GPL" at
lines 946-964.

Rephrasing bugreport title accordingly.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20230913/017605da/attachment.sig>


More information about the pkg-perl-maintainers mailing list