Project Ideas Improve Maven package license detection

Improve Maven package license detection

The goal of this project is to improve Maven package license detection across the board. While scancode-toolkit's Maven package detection is decent, there a few repeat cases where license information is not properly gathered from Maven package metadata. Usually this is because a declared_license value contains things we did not expect (like a URL) or is improperly formed.

This project would be a mix of adding new license detection rules to scancode, adding new and improved code to handle the specific patterns of license, creating new license mappings and possibly working with upstream maintainers to improve their license declarations. The approach should be to start with a complete data set of all package manifests and find patterns of license issues and establish the baseline, possibly with classifiers and ML. The end results should be a significant improvement to the license detection quality for the Maven packages.

See https://github.com/nexB/scancode-toolkit/issues/2490 for details

• Level
  • Intermediate
• Tech
  • Python
• URLS
• Mentors
  • @pombredanne https://github.com/pombredanne
  • @majurg https://github.com/majurg