Scan Report
Created by ORT, the OSS Review Toolkit, version 92.6.0 on 2026-09-04T22:43:01.759149948Z.

Project

Scanned revision e7132c07e0a7abf36aa34b247a478a8ef0c378a8 of Git repository https://github.com/timo-reymann/deterministic-zip.git

Index

Rule Violation Summary (0 errors, 0 warnings, 0 hints to resolve)

No rule violations found.

Scanner Issue Summary (0 errors, 0 warnings, 3 hints to resolve)

Issues from excluded components are not shown in this summary.

# Package Message
1 Go::github.com/gobwas/glob:1.0.0

This scanner is not capable of detecting copyright statements.
2 Go::github.com/spf13/pflag:1.0.10

This scanner is not capable of detecting copyright statements.
3 GoMod::github.com/timo-reymann/deterministic-zip:e7132c07e0a7abf36aa34b247a478a8ef0c378a8

This scanner is not capable of detecting copyright statements.

GoMod::github.com/timo-reymann/deterministic-zip:e7132c07e0a7abf36aa34b247a478a8ef0c378a8 (go.mod)

VCS Information

Type Git
URL https://github.com/timo-reymann/deterministic-zip.git
Path
Revision e7132c07e0a7abf36aa34b247a478a8ef0c378a8

Packages

# Package Scopes Licenses Open Issues Excluded & Resolved Issues
1 GoMod::github.com/timo-reymann/deterministic-zip:e7132c07e0a7abf36aa34b247a478a8ef0c378a8 Detected Licenses (from VCS):
GPL-3.0-only (exemplary link to the first of 2 locations)
Effective License:

This scanner is not capable of detecting copyright statements.
2 Go::github.com/gobwas/glob:1.0.0
  • main
  • vendor
 Detected Licenses (from VCS):
MIT (link to the location)
Effective License:

This scanner is not capable of detecting copyright statements.
3 Go::github.com/spf13/pflag:1.0.10
  • main
  • vendor
 Detected Licenses (from VCS):
BSD-3-Clause (link to the location)
Effective License:

This scanner is not capable of detecting copyright statements.

Repository Configuration


---
curations:
  license_findings:
  - path: "CONTRIBUTING.md"
    start_lines: "23"
    detected_license: "GPL-1.0-or-later"
    concluded_license: "GPL-3.0-only"
    reason: "INCORRECT"
    comment: "False positive - the text refers to GPL-3.0, not GPL-1.0."
  - path: "CONTRIBUTING.md"
    start_lines: "48"
    detected_license: "NOASSERTION"
    concluded_license: "GPL-3.0-only"
    reason: "INCORRECT"
    comment: "False positive - the text clearly states GPL-3.0 license."