-
Story
-
Resolution: Done
-
Medium
-
None
-
None
-
None
-
SDC Sprint 15
as a ptl i want to rescan the code for licensing risks using fusologie
scan the project and identify licensing violations.
license types:
- UnclassifiedLicense – need to check which license can be associated to the your code based on the involved open source name
- MIT-style – need to check if the open source is indeed released as MIT
- Trademark-ref – need to check if there is no copyright issue
- GPL2.0 – need to check if dual license or can be packaged differently
- See-file – need to check the content of the file
- LGPL-2.1 – need to check if dual license or dynamically linked
- Apache-possibility- need to check if the open source is indeed released as Apache
- GPL – need to check if dual license or can be packaged differently
- MIT-possibility – need to check if the open source is indeed released as MIT
- See-URL – need to check the content of the URL
- LGPL - need to check if dual license or dynamically linked
- Non commercial – should be ok but better to check which open source impacted
- BSD-possibility – need to check if the open source is indeed released as BSD
- See-doc.Other- need to check the content of the document
DOD:
- upload the code to the fossology server for sdc-tosca jtosca and distribution client
- analyze the licenses identified to see if there are any issues flagged.
- if any issues are flagged will be handled seperatly