A python tool which takes the license text from the user, compares it with the SPDX license list using an algorithm which finds close matches and returns differences if the input license text is found to be a close match.

Ensure that you are using Python3 for installation of the tool.

• Clone the repository

  • git clone https://github.com/Ugtan/spdx-license-match-tool.git

• Make a Python3 virtual environment

  • python3 -m venv <name-of-the-virtual-env>

• Activate the venv

  • source <name-of-the-virtual-env>/bin/activate

• Install dependencies inside virtual environment

  • pip3 install -r requirements.txt

First of all before using the tool you will have to create a database of SPDX license list for this just run python build_licenses.py.

To run the tool just use the command python matcher.py -f <file-name> -t <threshold> -l <limit>.

• filename is the file with the license text(if you don't provide the file as well then it will prompt you to add it).
• threshold is a value upto which we will just won't consider a match.(optional)
• limit is the value where if the dice score is above this value then we will consider it a perfect match.(optional)

You can also run python matcher.py --help for more info.

The workflow of the tool is as follows:

• Reads the license text as input from the user.
• Build a redis database with all the license text present on the SPDX license list.
• Compare the license text with the license text present in the database.
  • Normalises the license text based on the SPDX Matching guidelines while ignore the replaceable text and only focusing on substantial text for matching purposes.
  • Tokenizes normalised text into a list of bigrams. This is necessary for the token based algorithm we are using for our use case.
  • Use a token based similarity metric algorithm namely Sorensen dice algorithm which is based on the logic to find the common tokens, and divide it by the total number of tokens present by combining both of the sets. This algorithm helps us to distinguish our close matches.
  • A threshold value is used where we just won't consider a match.
  • If the match is 100% then we say its a perfect match.
  • If the match is between a threshold value and 100% then we apply the full matching algorithms and compares the closely matched license text to the license text of SPDX Standard License using a method present in the SPDX tools.
    • If there is a match then the given license text matches with the SPDX standard license.
    • If there is no match then we simply display the differences of the given license text with that of SPDX license list.