Example package golang-github-go-git-go-billy

Its LICENSE has Copyright 2017 Sourced Technologies S.L. in a location
that will be common for all apache license texts but cme is not able to
detect it.

I think it'd be good if cme can find these copyright notices which
follows a fixed pattern.

Hi

Unfortunately, cme dpkg relies on licensecheck to get copyright info from
files.

licensecheck does not detect the copyright statement from LICENSE file:

$ licensecheck LICENSE
LICENSE: *No copyright* Apache License 2.0

In this case, cme assumes this is a plain license file and skips this file hence
you get no information for golang-github-go-git-go-billy

For the record, golang-github-go-git-go-billy can be found there:

https://salsa.debian.org/go-team/packages/golang-github-go-git-go-billy

All the best

See also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960681

This bug indicated a work-around that set --lines 0 option so that
licensechecl parses the whole file

I'm reluctant to set --lines 0 option when calling licensecheck as this could
really slow down copyright update (which is already not that fast on big
packages)

All the best

Dominique Dumont wrote:

How much slower is it actually?  And how much copyright and licensing
info is missed when not scanning deeply?

Would be interesting to know some actual numbers for this - to not rely
on cargo cult.

 - Jonas

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmGYzOoACgkQLHwxRsGg
ASE9sg//SnPWLqlu/RTzvSczujxbmw1VBqhgT1d20JmBC4LIcP76p4C3pD9unqca
ZKWV/XsEldi4AcC11DWTlMEaxwMisAqzoyt0I9VXpQwoWQzgLyr6Tim0Y3y6Yuk6
oO6xVOCtYQVcwf+9C00gymok9BU5H6KuPmcZeHBfmyN8zh+1JcRW59nbOwXu3dOc
bfjDl1z3GYYWYSiD/2jcNPMt5idOz6cU3vqTyK+BXTiFosv5NTxlZqHQb5D56U2+
CgQdH9QrSKwgkiMYQgTjNrNlusaqmzfBZ8uIUU2WluxZu4Jq3dNiJ5P9cTYmgw0h
5kcZcbKl9FFgJ9ue5a+gO3yZpknewinhzDUHV6FsuvUrglEPyoWCwD8yTCPg/aGp
+0CPb6XAKpfZ/FC+YMP1TtYu14FhephZJXVtwjCpO7AnCyDXiQqSFcAYEDTqvg9l
+J9N3r3ycSYY8Y9S6cQN8Vu0cYP5db3kgnZ6dxLwqVvtnQ2vIaURA2LMB+OD466p
lKg9rhEPfXUbkvxngM4qwAz+abze6RIeBu4VOgq++85+Y9TkbXU8VjVz7VKAlmKY
H+ep6F2wXauKUqlXPfFvlnF+8a2AU1uf5zQn/vj/+TAjjS2rBCfM+hAUcevqRRUv
1J95gRRgQYiIt5TwcFjguRGFI3CLB5DF/+KBLxv9VxWEkTUVXk0=
=VtjI
-----END PGP SIGNATURE-----

For the records, the timing tests of licensecheck --lines 0 are reported in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960681#70

All in all, slow is better than wrong. I'm going to use --lines 0 option.

Dod

Hello,

Bug #1000179 in libconfig-model-dpkg-perl reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/perl-team/modules/packages/libconfig-model-dpkg-perl/-/commit/523844fc8551c99310dd2a9cd3c86eeae04774c9
Closes: #1000179

All in all, slow is often better than wrong.

See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000179 for details
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1000179

We believe that the bug you reported is fixed in the latest version of
libconfig-model-dpkg-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1000179@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dominique Dumont <dod@debian.org> (supplier of updated libconfig-model-dpkg-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 17 Jun 2022 18:49:47 +0200
Source: libconfig-model-dpkg-perl
Architecture: source
Version: 2.160
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Dominique Dumont <dod@debian.org>
Closes: 1000179
Changes:
 libconfig-model-dpkg-perl (2.160) unstable; urgency=medium
 .
   * Scanner:
     * fix missing white space in multi-line Copyright
     * use licensecheck --lines 0 option (Closes: #1000179)
     * avoid multiple file entries with same copyright
   * Copyright merge part:
     * fix order of merged copyright entries
     * Remove license text when license is known
   * doc: (hopefully) improve "examples" element description
   * control: add dep in libdata-compare-perl
Checksums-Sha1:
 ffbae39769a55670155fd17651b5269a7a5cc986 3014 libconfig-model-dpkg-perl_2.160.dsc
 06cb70de9f97a24c07942af063eb0bab3e0ab0da 495220 libconfig-model-dpkg-perl_2.160.tar.xz
 6742b4d1520d0ae0417b0296596c4c34e052d611 6813 libconfig-model-dpkg-perl_2.160_source.buildinfo
Checksums-Sha256:
 556bd7710da0f5246b374986b6d1721331dc3b0818bd0c10847bb51360ec6711 3014 libconfig-model-dpkg-perl_2.160.dsc
 59758e46f6fbe9b470328be0be15fe08fe1e3298b10a0d8ad0889af42ee1afc3 495220 libconfig-model-dpkg-perl_2.160.tar.xz
 ce5d90d6a7eb7c3295a3af97be31a9c8fc6748c8b061aac0da5f0af7caaafe81 6813 libconfig-model-dpkg-perl_2.160_source.buildinfo
Files:
 7d9c3c68154bb0573a507c6a192432f3 3014 perl optional libconfig-model-dpkg-perl_2.160.dsc
 7f8a438dbbafb68588b86aaba49e4e28 495220 perl optional libconfig-model-dpkg-perl_2.160.tar.xz
 f6bd3f2da175f83584b2c3324d5ef696 6813 perl optional libconfig-model-dpkg-perl_2.160_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=VjJo
-----END PGP SIGNATURE-----