Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

model: Add resolved copyright source #5517

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

porsche-rbieniek
Copy link

@porsche-rbieniek porsche-rbieniek commented Jul 4, 2022

This pull request adds an additional property to the resolved copyright finding to let reporter implementations know where a copyright statement originates from.

We have an use case in our reporter implementations where the output of a copyright statement is allowed only if

  • the copyright statement is provided by a curation
  • the copyright statement is determined by the scanner

This change introduces a clear-cut property which allows reporter implementations to decide on a exact condition.

This pull request is blocked by #5504

In German law, the author and the copyright holder can be two seperate
legal entities and therefore also need to be treated separately.

Introduce a new copyright holder field that is now the primary source
for copyright holder information. Authors are still only used as
copyright holders if the `addAuthorsToCopyrights` option is enabled.

For now, all package manager implementations set empty copyright
holders. Filling the copyright holder field is left as an exercise for
future actions. Right now, the only way to add copyright holders is via
curations.

This change resolves oss-review-toolkit#4519.

Signed-off-by: Rainer Bieniek <[email protected]>
This change refines the capability to determine the source of a
copyright statement in the reporter stage.

The fact that the German copyright laws separate between an author and a
copyright holder influence the decision on wether a copyright statement
is emitted in the final result or if it is suppressed due to its source

This change introduces three different sources for a copyright statement:

- Determined by the scanner
- Provided by curation
- Synthesized from the author

Signed-off-by: Rainer Bieniek <[email protected]>
@porsche-rbieniek porsche-rbieniek requested a review from a team as a code owner July 4, 2022 09:53
@porsche-rbieniek porsche-rbieniek changed the title Feature/add resolved copyright source Add resolved copyright source Jul 4, 2022
@porsche-rbieniek porsche-rbieniek changed the title Add resolved copyright source model: Add resolved copyright source Jul 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant