REUSE compliance of fossology/fossology

Unfortunately, github.com/fossology/fossology is not REUSE compliant and does not fully adopt the recommendations to make software licensing easy for humans and machines alike. Have a look at our tutorial to learn about the three simple steps to become REUSE compliant.

Badge

To add the badge to your project's README.md file, use the following snippet: 

[![REUSE status](https://api.reuse.software/badge/github.com/fossology/fossology)](https://api.reuse.software/info/github.com/fossology/fossology)

Machine-readable information

The API provides machine-readable artifacts for automatic analysis.

  • All information about the latest compliance check can also be accessed via a machine-parsable JSON file.
  • You can gather the automatically generated SPDX SBOM in Tag:Value format, based on the reuse spdx command.

Last lint output

Commit 7123010828db0f6079e2d77bfb5ac6f8a733a42b was checked on 09 Nov 2026 19:33:59 UTC with the following result: 

/opt/venv/lib/python3.14/site-packages/reuse/project.py:332: PendingDeprecationWarning: '.reuse/dep5' is deprecated. You are recommended to instead use REUSE.toml. Use `reuse convert-dep5` to convert.
  warnings.warn(
/opt/venv/lib/python3.14/site-packages/reuse/project.py:332: PendingDeprecationWarning: '.reuse/dep5' is deprecated. You are recommended to instead use REUSE.toml. Use `reuse convert-dep5` to convert.
  warnings.warn(
# MISSING LICENSES

'CC0-1.0' found in:
* NOTICES-THIRDPARTY.html
'ISC' found in:
* NOTICES-THIRDPARTY.html
'curl' found in:
* NOTICES-THIRDPARTY.html

# SUMMARY

* Bad licenses: 0
* Deprecated licenses: 0
* Licenses without file extension: 0
* Missing licenses: CC0-1.0, ISC, curl
* Unused licenses: 0
* Used licenses: BSD-3-Clause, CC0-1.0, FSFAP, GPL-2.0-only, ISC, LGPL-2.0-only, LGPL-2.1-only, MIT, W3C-19980720, curl
* Read errors: 0
* Invalid SPDX License Expressions: 0
* Files with copyright information: 4684 / 4684
* Files with license information: 4684 / 4684

Unfortunately, your project is not compliant with version 3.3 of the REUSE Specification :-(


# RECOMMENDATIONS

* Fix missing licenses: For at least one of the license identifiers provided by
  the 'SPDX-License-Identifier' tags, there is no corresponding license text
  file in the 'LICENSES' directory. For SPDX license identifiers, you can simply
  run 'reuse download --all' to get any missing ones. For custom licenses
  (starting with 'LicenseRef-'), you need to add these files yourself.