GPL license detected in license scan

[dchassin]

Here are the results from the September 2024 license scan and audit of the Arras project. The scan was performed using the Linux Foundation FOSSology server. Licenses and copyrights were examined.

The key findings (if any) and license summary can be found in the HTML report, the list of files in the spreadsheet, and also find the SPDX file listed below:
NOTE: I recommend that SPDX license identifiers be added to ALL source file headers. [see https://spdx.dev/learn/handling-license-info for examples]

KEY FINDINGS: (please address as soon as possible)

Finding #1
Priority: Very High
The gridlabd repo has conflicting license info, the LICENSE file states BSD and the COPYRIGHT file states GPL3 (which is a strong copyleft license). If any files are under GPL3 they must be removed. If this is a mistake you will need to correct the license info in the project. At least one python file also has a GPL3 license in the file header.
2 files (show files)

Finding #2
Priority: High
These files have code (or a 3rd party dependency) under a version of the LGPL, a weak copyleft license. Code under LGPL mixed with code under a permisssive license will cause a license conflict. You will need to remove these files from your codebase.
13 files (show files)

REPORTS:

lfenergy/arras-energy, code pulled 2024-09-18

• report: https://lfscanning.org/reports/lfenergy/arras-energy-2024-09-18-75516aa2-2ec6-453c-9bd8-da98ba185deb.html
• xlsx: https://lfscanning.org/reports/lfenergy/arras-energy-2024-09-18-75516aa2-2ec6-453c-9bd8-da98ba185deb.xlsx
• spdx: https://github.com/lfscanning/spdx-lfenergy/tree/master/arras-energy/2024-09/arras-energy-2024-09-18.spdx

Please feel free to contact me with any questions about the scan results. Be sure to reply to me directly as I may not get an email sent directly to the distribution list.