.ort.yml

# SPDX-FileCopyrightText: The PFDL VS Code Extension Contributors
# SPDX-License-Identifier: CC0-1.0

excludes:
  scopes:
  - pattern: "devDependencies"
    reason: "DEV_DEPENDENCY_OF"
    comment: "Packages for development only."
  - pattern: "\\*\\*/node_modules/\\*\\*"
    reason: "BUILD_TOOL_OF"
    comment: "Packages for building the source code only."
  - pattern: "\\*\\*/package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Autogenerated by npm, might contain missleading information."

curations:
  license_findings:
  - path: "README.md"
    detected_license: "LGPL-2.0-or-later"
    reason: "DOCUMENTATION_OF"
    comment: "The scanner missmatches a License declaration in the documentation."
    concluded_license: "MIT"

  - path: ".ort.yml"
    detected_license: "LGPL-2.0-or-later"
    reason: "INCORRECT"
    comment: "The scanner detects licenses that are declared as curations."
    concluded_license: "CC0-1.0"

  - path: "pfdl/README.md"
    detected_license: "NOASSERTION"
    reason: "DOCUMENTATION_OF"
    comment: "The scanner missmatches a License declaration in the documentation."
    concluded_license: "MIT"

  - path: "pfdl/**/*.py"
    start_lines: 3
    line_count: 2
    detected_license: "LicenseRef-scancode-proprietary-license"
    reason: "INCORRECT"
    comment: "The scanner missmatches the license headers of various python files."
    concluded_license: "MIT"

package_configurations:
  - id: "NPM::dotparser:1.1.1"
    vcs:
      type: "Git"
      url: "https://github.com/anvaka/dotparser.git"
      revision: "0756a293a56ada4c978a6a1aa4d315ecdac2944e"
    path_excludes:
    - pattern: "./package-lock.json"
      reason: "BUILD_TOOL_OF"
      comment: "Autogenerated by npm, contains missleading licensing information."
  - id: "NPM::minimatch:3.1.2"
    vcs:
      type: "Git"
      url: "https://github.com/isaacs/minimatch.git"
      revision: "699c459443a6bd98f5b28197978f76e7f71467ac"
    path_excludes:
    - pattern: "./package-lock.json"
      reason: "BUILD_TOOL_OF"
      comment: "Autogenerated by npm, contains missleading licensing information."
  - id: "NPM::cytoscape:3.30.0"
    vcs:
      type: "Git"
      url: "https://github.com/cytoscape/cytoscape.js.git"
      revision: "3093b5677984aef19a75cc5815f81c10ac3242b1"
    path_excludes:
    - pattern: "./test/lib/*"
      reason: "TEST_OF"
      comment: "test code is missinterpreted."
  - id: "PyPI::certifi:2024.7.4"
    source_artifact_url: "https://files.pythonhosted.org/packages/c2/02/a95f2b11e207f68bc64d7aae9666fed2e2b3f307748d5123dffb72a1bbea/certifi-2024.7.4.tar.gz"
    path_excludes:
    - pattern: "certifi-2024.7.4/certifi/cacert.pem"
      reason: "OTHER"
      comment: "pem file is analysed for copyrights."
  - id: "PyPI::requests:2.32.3"
    vcs:
      type: "Git"
      url: "https://github.com/psf/requests.git"
      revision: "0e322af87745eff34caffe4df68456ebc20d9068"
    path_excludes:
    - pattern: "docs/**/*"
      reason: "DOCUMENTATION_OF"
      comment: "Wrong licensing information were gained from documentation files."