Skip to content

Conversation

@daniel-kr
Copy link
Contributor

This is a follow-up fix of #10961.

There is an edge case where the original fix doesn't work: In case of two declared licenses of which one is no proper SPDX license expression. If a declared license mapping is applied via package curation the default operator AND instead of OR is used for combining the two declared licenses.

Fixes #10721.

@daniel-kr daniel-kr requested a review from a team as a code owner October 20, 2025 08:08
@daniel-kr daniel-kr force-pushed the preserve-original-license-operator-upon-license-mapping branch from e34ea7f to 14170c4 Compare October 20, 2025 08:09
@daniel-kr daniel-kr marked this pull request as draft October 20, 2025 08:10
}
}

"preserve OR operator when mapping makes previously invalid licenses valid" {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just as a remark to begin with / as a note to myself: We cannot generally assume that OR needs to be preserved in this test, as the operator is package-type-specific.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

"OR" in License is falsely concluded as "AND" with package Maven:net.java.dev.jna:jna:5.8.0

2 participants