| Status | Action needed | Meaning |
|---|---|---|
| mismatch | manual review | The actual license text doesn't match what's declared at all -- it verbatim-matches (or closely resembles) a different SPDX license entirely. LICENSE= is very likely wrong. |
| undeclared | manual review | LICENSE= isn't set on this port at all. Needs a license identifier added before anything else here is possible. |
| no match | manual review | The license text doesn't resemble any license in the SPDX corpus closely enough to identify. Could be a heavily modified license, a custom license, or extraction picked up the wrong file. |
| unresolved | manual review | No license file could be located at all (no LICENSE_FILE set, and nothing matching LICENSE*/COPYING*/COPYRIGHT* found by searching the extracted source). Add LICENSE_FILE, or investigate why none exists. |
| extra license | manual review | The declared license's own text checks out, but the port's source also contains SPDX-License-Identifier tags for a different license nowhere reflected in LICENSE=. Check whether LICENSE= needs to become a multi-license declaration. |
| close | manual review | Same license family as declared, but the text doesn't verbatim-match the canonical SPDX wording (drifted, or has minor unauthorized changes). Compare against "Detected SPDX" and decide whether to fix the text or the tag. |
| retag | easy fix | License text is verbatim-correct, but LICENSE= still uses FreeBSD's old-style token instead of the SPDX identifier shown in "Declared SPDX". Just update the Makefile -- no text investigation needed. |
| exact | none | Verbatim match against the SPDX canonical text, and LICENSE= already uses the correct SPDX spelling. Nothing to do. |
| Port | FreeBSD LICENSE | Declared SPDX | Detected SPDX | Status | SPDX tags in source | |
|---|---|---|---|---|---|---|
| devel/git-review | APACHE20 | Apache-2.0 | Apache-2.0 | 98.1% | retag | |
| devel/p5-Term-ReadLine-TTYtter | ART10 | Artistic-1.0 | unresolved | |||
| GPLv1+ | GPL-1.0-or-later | unresolved | ||||
| french/verbiste | GPLv2 | GPL-2.0-only | GPL-2.0-only | 99.9% | retag | |
| lang/malbolge | ||||||
| math/p5-Math-Random-Secure | ART20 | Artistic-2.0 | no match | |||
| misc/binclock | GPLv2+ | GPL-2.0-or-later | GPL-2.0+ | 99.7% | mismatch | |
| net-p2p/ctcs | ||||||
| net/tclsoap | MIT | MIT | X11 | 95.8% | mismatch | |
| security/p5-Crypt-Random-Source | ART20 | Artistic-2.0 | GPL-1.0 | 96.7% | mismatch | |
| security/vault-medusa | MIT | MIT | MIT | 100.0% | extra license | MPL-2.0 |
| sysutils/py-salt-tower | MIT | MIT | MIT | exact | ||
| sysutils/rhc | APACHE20 | Apache-2.0 | no match | |||
| textproc/p5-Text-CSV-Encoded | ART10 | Artistic-1.0 | GPL-1.0 | 96.7% | mismatch | |
| GPLv1+ | GPL-1.0-or-later | GPL-1.0 | 96.7% | mismatch | ||
| textproc/xmlgen |