Skip to content

[BUG] Discovered license not considering if it is part of an expression #1674

@thompson-tomo

Description

@thompson-tomo

Important: Bug reports should be directed to support@fossa.com for faster response and prioritization. Bug reports may still be created here but they may not get immediate attention and may be closed in favor of internally tracked tickets.

Describe the bug
When a dependency ie https://rubygems.org/search?query=net-pop explicitly declares a dependency as using a license expression containing multiple licenses, if one of these licenses are discovered it will now add it as an additional license.

To Reproduce
Steps to reproduce the behavior:

  1. Run fossa analyze ...
  2. See error

Expected behavior
If a discovered license is also explicitly declared as part of a license expression then this discovered license should use the name of the declared license so that false positives can be addresses.

Debug bundle
Please run fossa with the --debug flag and attach the resulting fossa.debug.zip file here.

Additional context
https://app.fossa.com/projects/custom%2B162%2Fgithub.com%2Fopen-telemetry%2Fopentelemetry-ruby-contrib/refs/branch/main/84f7a35d51e112ad6886c676bafa0a120377b4af/preview?revisionScanId=100283376

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions