Description

With v32.3.0 we are observing false positive GPL license detections that did not occurr with v32.2.1.

The examples we have found are caused by matches with the gpl_bare_word_only.RULE. In v32.2.1 these detections were categorized as license_clues.

An example:

https://github.com/steinwurf/boost/blob/ade3189e2c03fd975dbfa667a4f49e98a49d2fdf/boost/assign/ptr_list_of.hpp#L196

For example the lines 196-198

assign_detail::generic_ptr_list<T> gpl;
        gpl();
        return gpl;

yield three GPL detections with v32.3.0. (There are other similar snippets in the file.)

How To Reproduce

scancode -l <your path to boost repo>/boost/boost/assign/ptr_list_of.hpp --json scancode.json

Run once for v32.3.0 and once for v32.2.1

See attached scancode files for my results.

System configuration

For bug reports, it really helps us to know:

• What OS are you running on? MacOS 15.1.1
• What version of scancode-toolkit was used to generate the scan file? See above.
• What installation method was used to install/run scancode? pip with git version tag checked out

scancode_32.2.1.json
scancode_32.3.0.json