Skip to content

Add missing copyright notices to SBOM#5241

Merged
nlohmann merged 1 commit into
nlohmann:developfrom
daniel-falk:fix-reuse-missing-license
Jul 7, 2026
Merged

Add missing copyright notices to SBOM#5241
nlohmann merged 1 commit into
nlohmann:developfrom
daniel-falk:fix-reuse-missing-license

Conversation

@daniel-falk

Copy link
Copy Markdown
Contributor

According to the README file and the git history, code from the Apache 2.0 library "Abseil" was copy-pasted into the cpp_future.hpp file. Despite this, their license was not specified in the SPDX specification causing it to be missing in the SBOM. They were however already noted as co-authors of the file.

This commit adds them to correct the generated SBOM.

No README update is needed since it already explains this.

[Describe your pull request here. Please read the text below the line and make sure you follow the checklist.]

  • The changes are described in detail, both the what and why.
  • If applicable, an existing issue is referenced.
  • The Code coverage remained at 100%. A test case for every new line of code.
  • If applicable, the documentation is updated.
  • The source code is amalgamated by running make amalgamate.

Read the Contribution Guidelines for detailed information.

@daniel-falk daniel-falk requested a review from nlohmann as a code owner July 7, 2026 09:21
@github-actions github-actions Bot added the S label Jul 7, 2026
@daniel-falk

Copy link
Copy Markdown
Contributor Author

@nlohmann I was usure about the .reuse/dep5 file. It does not seem to be automatically generated, so I added the lines to it manually. I have, however, verified that the nlohmann_json.spdx is correctly using the new license notice.

According to the README file and the git history, code from the Apache
2.0 library "Abseil" was copy-pasted into the cpp_future.hpp file.
Despite this, their license was not specified in the SPDX specification
causing it to be missing in the SBOM. They were however already noted as
co-authors of the file.

This commit adds them to correct the generated SBOM.

Signed-off-by: Daniel Falk <Daniel.Falk.1@FixedIT.ai>
@daniel-falk daniel-falk force-pushed the fix-reuse-missing-license branch from 5b239ac to b6b9e77 Compare July 7, 2026 09:59

@nlohmann nlohmann left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

@nlohmann nlohmann added this to the Release 3.12.1 milestone Jul 7, 2026
@nlohmann nlohmann added the 🚀 ready to merge Ready to merge - just waiting for CI to complete. label Jul 7, 2026
@nlohmann

nlohmann commented Jul 7, 2026

Copy link
Copy Markdown
Owner

Thanks!

@nlohmann nlohmann merged commit c05c5e2 into nlohmann:develop Jul 7, 2026
154 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🚀 ready to merge Ready to merge - just waiting for CI to complete. S

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants