Frank Viernau

@dgutson Would you mind sharing the use case, e.g. for what purpose is the analysis result needed? I'm asking this, since in case it is used in order to evaluate...

Hi @dgutson here's a list of approaches to consider, I tried to make it rather complete even if I don't really like some of these: 1. Add logic to each...

> @dgutson I understand your use case, you want to make sure we can support it without breaking existing functionality. For me the simplest was to implement this would be...

A very simple and probably good enough implementation could be to use a map which maps `sha1(file) -> (copyright findings[], license findings[])`. That map could become quite large so a...

> For delta-scanning, I believe the tricky bit to be to determine the list of files that _do_ need to be scanned, not to determine / cache the results for...

@rbieniek the terminology "delta scanning" (for ScanCode) was so far being used (hope it wasn't just me) for a non-functional transparent performance optimization, e.g. to be achieved by using (finer...

@tsteenbe can we add as bullet point to use scenarios: checks for the project, out of scope "packages"? And thus, also remove the bullet point "Check if new package have...

@tsteenbe a couple of questions to the use cases / API in the ticket description: 1. "All open source C/C++ code is included in an 'external' directory." - How would...

> My assumption is that each code file in my organization would use "Coypright (C) Example, Inc." followed by on the next line "SPDX identifier: "LicenseRef-proprietary-my-org". We would then write...

@tsteenbe and me further dived into the use cases and we propose to do the following in scope of this ticket: 1. Extend the rules API to realize the use...