Skip to content

Automation for improved License detection #26

@savu-a

Description

@savu-a

Is your feature request related to a problem? Please describe.
Lucy tries to automatically detect licenses for a given component (library) by checking GitHub and similar sources.
If Lucy cannot find a license, it will mark the component as "unknown/ unlicensed", and manual research is needed

Describe the solution you'd like

Enhance automatic license detection:

  • Once the license has been saved in Lucy's DB, it will automatically use it next time it sees the component
  • Problem: this only works, if the version of the component is the same. Example:
    • org.bouncycastle / bcprov-jdk18on / 1.72 => Bouncy Castle License
    • org.bouncycastle / bcprov-jdk18on / 1.77 => unknown

Describe alternatives you've considered

  • if Lucy has a license entry for a previous version, introduce the option that Lucy suggests the same license for the new version
  • If multiple older license entries exist, pick the one with the highest/ latest version
  • Consider how to handle changes in case the main/major version gets incrementes (e.g. "1.79" => "2.01"): warning

Additional context
Increase automation level
All features/options should be ease to use (e.g. button directly on the GUI rather than sub-menu in config or edit view)
Highlight / mark a component if the corresponding license has been auto-added by Lucy => This allows for easy manual review / acceptance / change by a human

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions