Deducing license information for PyPI packages from classifiers (if n…

…ot stated explicite) Signed-off-by: Jacek Puchta <[email protected]>
CycloneDX · Oct 25, 2023 · 7f9ca48 · 7f9ca48
1 parent fe324c5
commit 7f9ca48
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/utils.js b/utils.js
@@ -2444,6 +2444,15 @@ export const getPyMetadata = async function (pkgList, fetchDepsInfo) {
       }
       p.description = body.info.summary;
       p.license = findLicenseId(body.info.license);
+      if (!p.license && body.info.classifiers) {
+        for (const c of body.info.classifiers) {
+          if (c.startsWith("License :: ")) {
+            let licenseText = c.split(" :: ")[c.split(" :: ").length - 1];
+            p.license = findLicenseId(licenseText);
+            break;
+          }
+        }
+      }
       if (body.info.home_page) {
         if (body.info.home_page.includes("git")) {
           p.repository = { url: body.info.home_page };