Skip to main content

Week 12 Meetings and Activities

Weekly Project Sync Meeting 12​

(August 11, 2026)

Attendees​

Discussion​

  • Reviewed maintainer feedback on the LicenseLynx integration design.
  • Discussed storing resolved license_ref.rf_pk values directly in the LicenseLynx mapping table.
  • Discussed avoiding committed generated LicenseLynx JSON data in the repository.
  • Agreed on downloading the LicenseLynx mapping during postinstall when no local cache exists.
  • Reviewed how LicenseLynx aliases should be handled for package classifier and quoted metadata rows.
  • Decided to import such aliases as-is for now and leave cleanup behavior for a later improvement.
  • Reviewed manual validation results for OJO with LicenseLynx fallback.
  • Discussed why the final mapping count is lower when unresolved SPDX mappings are skipped.
  • Reviewed a Nomos clearing-view source display issue where expression findings did not always show clickable source references.
  • Discussed fixing Nomos expression highlight/source handling so expression rows behave consistently with normal license findings.

Activities Done in Week 12​

  • Updated the licenselynx_map schema to store rf_fk instead of spdx_id.
  • Added a foreign key from licenselynx_map.rf_fk to license_ref.rf_pk.
  • Removed the committed install/db/licenseLynxMapping.json file from the PR.
  • Added install/db/licenseLynxMapping.json to .gitignore so downloaded mapping data stays local.
  • Updated fossinit.php to download the LicenseLynx mapping during postinstall when the local cache is missing.
  • Added support for using a local cached mapping file before attempting a network download.
  • Updated LicenseLynx import logic to resolve SPDX ids to existing license_ref rows during postinstall.
  • Changed the runtime resolver to read rf_fk directly from licenselynx_map.
  • Kept LicenseLynx raw aliases imported as-is, including classifier-style and quoted metadata aliases.
  • Added an inline comment documenting that cleanup for these alias formats is intentionally deferred.
  • Rebuilt the Docker environment with a fresh database volume.
  • Verified that licenselynx_map was populated with 4732 usable mappings.
  • Confirmed that licenselynx_map.rf_fk correctly joins to license_ref.rf_pk.
  • Re-ran OJO validation and confirmed expected fallback mappings:
    • Boost-1.0 to BSL-1.0
    • open-public to OPL-1.0
    • intel-bsd-export-control to Intel
    • brian-gladman-dual to Brian-Gladman-3-Clause
    • LicenseRef-scancode-net-snmp to Net-SNMP
  • Fixed the Nomos expression source/highlight issue so expression findings now include proper source references in the clearing view.
  • Verified that expression rows detected by Nomos show source links consistently with normal license findings.
  • Added and pushed signed-off follow-up commits for maintainer-requested changes.

Next Steps​

  • Address final maintainer feedback on the License Expression and LicenseLynx pull requests.
  • Complete any remaining review cleanup required for final evaluation.