Package: licenserecon
Version: 4.2

When running lrc on new package usql
(https://salsa.debian.org/go-team/packages/usql/-/merge_requests/1) I
got:

# lrc
: Versions: licenserecon '4.2'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

d/copyright      | licensecheck

MIT              | Expat             LICENSE
MIT              | Expat
debian/vendor/github.com/gohxs/readline/LICENSE
MIT              | Expat
debian/vendor/github.com/jeandeaual/go-locale/LICENSE
MIT              | Expat
debian/vendor/github.com/kenshaw/colors/LICENSE
MIT              | Expat
debian/vendor/github.com/kenshaw/rasterm/LICENSE
MIT              | Expat
debian/vendor/github.com/mattn/go-sixel/LICENSE
MIT              | Expat
debian/vendor/github.com/nathan-fiscaletti/consolesize-go/LICENSE
MIT              | Expat
debian/vendor/github.com/soniakeys/quant/internal/internal.go
MIT              | Expat
debian/vendor/github.com/soniakeys/quant/license
MIT              | Expat
debian/vendor/github.com/soniakeys/quant/median/median.go
MIT              | Expat
debian/vendor/github.com/soniakeys/quant/palette.go
MIT              | Expat
debian/vendor/github.com/soniakeys/quant/quant.go
MIT              | Expat
debian/vendor/github.com/soniakeys/quant/sierra.go
MIT              | Expat             debian/vendor/github.com/xo/dburl/LICENSE
MIT              | Expat             debian/vendor/github.com/xo/tblfmt/LICENSE
MIT              | Expat
debian/vendor/github.com/yookoala/realpath/LICENSE
MIT              | Expat
debian/vendor/github.com/yookoala/realpath/realpath.go
MIT              | Expat             gen.go
MIT              | Expat             text/license.go

This licenses themselves clearly state "MIT". Why is the tool
detecting them as Expat?

Seems like a false positive to me.

The workaround suggested in
https://manpages.debian.org/unstable/licenserecon/lrc.1.en.html is to
skip these files using debian/lrc.config but if they ever change, the
tool wouldn't detect anything. I'd rather just "override" this
MIT->Expat detection as a false finding without skipping those files
permanently.

What do you think about this situation?

Reply via email to