ClearlyDefined is meant to report the component's "top level" license information in the "Declared" field. ClearlyDefined is incorrectly including "LicenseRef-scancode-generic-cla" in the "Declared" field when there's mention of the project using a CLA. The fact a project uses or references a CLA for contributions is not information that should be included in the component's "Declared" field.
Example: https://clearlydefined.io/definitions/nuget/nuget/-/Microsoft.Kiota.Serialization.Form/1.13.1. The README mentions a CLA for contributions. The actual "Declared" license is MIT. The only thing in the "Declared" field should be "MIT."
Thousands of components are impacted by this. Here's a partial list of other components with this issue.
nuget/nuget/-/microsoft.kiota.serialization.form/1.13.1
nuget/nuget/-/microsoft.extensions.azure/1.7.6
nuget/nuget/-/azure.security.keyvault.secrets/4.7.0
pypi/pypi/-/azure-keyvault-certificates/4.9.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk/azcore/v1.16.0
nuget/nuget/-/azure.messaging.servicebus/7.18.2
nuget/nuget/-/azure.ai.openai/2.1.0-beta.1
pypi/pypi/-/azure-ai-ml/1.21.1
pypi/pypi/-/azure-monitor-opentelemetry-exporter/1.0.0b31
nuget/nuget/-/microsoft.openapi/1.6.22
npm/npmjs/@microsoft/applicationinsights-clickanalytics-js/3.3.3
npm/npmjs/@vscode/test-web/0.0.62
git/github/microsoft/appcenter-sdk-android/2b0278445e55f17ab389736fb3b82b24b53e6412
npm/npmjs/@azure/msal-node-extensions/1.3.0
npm/npmjs/-/microsoft-cognitiveservices-speech-sdk/1.41.0
nuget/nuget/-/azure.security.keyvault.certificates/4.7.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fsecurity%2Fkeyvault/internal/v1.1.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fazidentity/cache/v0.3.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk/azidentity/v1.8.0
nuget/nuget/-/azure.ai.language.text/1.0.0-beta.1
npm/npmjs/@vscode/policy-watcher/1.1.8
npm/npmjs/-/custom-functions-metadata-plugin/1.7.2
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fsecurity%2Fkeyvault/azcertificates/v1.2.0
nuget/nuget/-/azure.resourcemanager.computeschedule/1.0.0-beta.1
nuget/nuget/-/azure.resourcemanager.containerregistry/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.eventhubs/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.managedserviceidentities/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.hybridcompute/1.0.0-beta.6
nuget/nuget/-/azure.resourcemanager.iothub/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.operationalinsights/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.logic/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.compute/1.7.0-beta.1
nuget/nuget/-/microsoft.garnet/1.0.29
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fresourcemanager%2Fservicenetworking/armservicenetworking/v1.1.0-beta.2
go/golang/github.com%2Fmicrosoft/moc-sdk-for-go/v0.23.3
go/golang/github.com%2Fmicrosoft/moc/v0.23.0
go/golang/github.com%2Fmicrosoft/moc-sdk-for-go/v0.23.0
go/golang/github.com%2Fmicrosoft/moc/v0.23.1
go/golang/github.com%2Fzmvictor/frameworkcontroller/v1.0.2-0.20220518192522-c82d43f32f4f
nuget/nuget/-/azure.security.keyvault.keys/4.7.0
nuget/nuget/-/azure.messaging.eventgrid/4.27.0
nuget/nuget/-/azure.health.deidentification/1.0.0-beta.1
nuget/nuget/-/microsoft.azure.webpubsub.aspnetcore/1.4.0
nuget/nuget/-/microsoft.kiota.authentication.azure/1.13.1
nuget/nuget/-/microsoft.kiota.http.httpclientlibrary/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.multipart/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.text/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.json/1.13.1
nuget/nuget/-/system.clientmodel/1.2.1
ClearlyDefined is meant to report the component's "top level" license information in the "Declared" field. ClearlyDefined is incorrectly including "LicenseRef-scancode-generic-cla" in the "Declared" field when there's mention of the project using a CLA. The fact a project uses or references a CLA for contributions is not information that should be included in the component's "Declared" field.
Example: https://clearlydefined.io/definitions/nuget/nuget/-/Microsoft.Kiota.Serialization.Form/1.13.1. The README mentions a CLA for contributions. The actual "Declared" license is MIT. The only thing in the "Declared" field should be "MIT."
Thousands of components are impacted by this. Here's a partial list of other components with this issue.
nuget/nuget/-/microsoft.kiota.serialization.form/1.13.1
nuget/nuget/-/microsoft.extensions.azure/1.7.6
nuget/nuget/-/azure.security.keyvault.secrets/4.7.0
pypi/pypi/-/azure-keyvault-certificates/4.9.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk/azcore/v1.16.0
nuget/nuget/-/azure.messaging.servicebus/7.18.2
nuget/nuget/-/azure.ai.openai/2.1.0-beta.1
pypi/pypi/-/azure-ai-ml/1.21.1
pypi/pypi/-/azure-monitor-opentelemetry-exporter/1.0.0b31
nuget/nuget/-/microsoft.openapi/1.6.22
npm/npmjs/@microsoft/applicationinsights-clickanalytics-js/3.3.3
npm/npmjs/@vscode/test-web/0.0.62
git/github/microsoft/appcenter-sdk-android/2b0278445e55f17ab389736fb3b82b24b53e6412
npm/npmjs/@azure/msal-node-extensions/1.3.0
npm/npmjs/-/microsoft-cognitiveservices-speech-sdk/1.41.0
nuget/nuget/-/azure.security.keyvault.certificates/4.7.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fsecurity%2Fkeyvault/internal/v1.1.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fazidentity/cache/v0.3.0
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk/azidentity/v1.8.0
nuget/nuget/-/azure.ai.language.text/1.0.0-beta.1
npm/npmjs/@vscode/policy-watcher/1.1.8
npm/npmjs/-/custom-functions-metadata-plugin/1.7.2
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fsecurity%2Fkeyvault/azcertificates/v1.2.0
nuget/nuget/-/azure.resourcemanager.computeschedule/1.0.0-beta.1
nuget/nuget/-/azure.resourcemanager.containerregistry/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.eventhubs/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.managedserviceidentities/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.hybridcompute/1.0.0-beta.6
nuget/nuget/-/azure.resourcemanager.iothub/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.operationalinsights/1.3.0-beta.1
nuget/nuget/-/azure.resourcemanager.logic/1.2.0-beta.1
nuget/nuget/-/azure.resourcemanager.compute/1.7.0-beta.1
nuget/nuget/-/microsoft.garnet/1.0.29
go/golang/github.com%2Fazure%2Fazure-sdk-for-go%2Fsdk%2Fresourcemanager%2Fservicenetworking/armservicenetworking/v1.1.0-beta.2
go/golang/github.com%2Fmicrosoft/moc-sdk-for-go/v0.23.3
go/golang/github.com%2Fmicrosoft/moc/v0.23.0
go/golang/github.com%2Fmicrosoft/moc-sdk-for-go/v0.23.0
go/golang/github.com%2Fmicrosoft/moc/v0.23.1
go/golang/github.com%2Fzmvictor/frameworkcontroller/v1.0.2-0.20220518192522-c82d43f32f4f
nuget/nuget/-/azure.security.keyvault.keys/4.7.0
nuget/nuget/-/azure.messaging.eventgrid/4.27.0
nuget/nuget/-/azure.health.deidentification/1.0.0-beta.1
nuget/nuget/-/microsoft.azure.webpubsub.aspnetcore/1.4.0
nuget/nuget/-/microsoft.kiota.authentication.azure/1.13.1
nuget/nuget/-/microsoft.kiota.http.httpclientlibrary/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.multipart/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.text/1.13.1
nuget/nuget/-/microsoft.kiota.serialization.json/1.13.1
nuget/nuget/-/system.clientmodel/1.2.1