We have applied for the Google Summer of Code 2018 as organization. This lists the topics so far we heve collected for this application.
Current scanners search for regular expressions or text similarity of license texts. However, this can lead to interpretations issues when it comes to conclude the actual condition of licensing of files. Opposed to genuine license texts, open source software authors use prosaic descriptions referring to licensing. If scanning understands different licensing artifacts, conclusions can be automated at higher precision.
From an existing database of licensing texts and descriptions a model needs to created. Based on that model a the existing scanner is extended. With distinguishing recognition by types of licensing artifacts, conclusions can be automated more efficiently.
A REST API in the straight forward sense of FOSSology would be about handling uploads or triggering scanners. However, a REST API in the sense of the SPDX standard, an XML format for expressing license compliance would be different than the traditional endpoints of the FOSSology application. For working in the sense of the SPDX standard it would be about file or source package centric endpoints for exchanging license and copyright, making hash sums of files or packages queryable as resource. A similar interface could be implemented as command line tool.
Create a REST endpoint when FOSSology is deploying, allowing for exchanging license information for file hashes.
Description: It would be nice to see the the overall contents of a project at one glance. Possible Mentor(s): Maximilian, Michael
Description: Possible Mentor(s): Maximilian, Kate, Michael
More project Ideas: