The vector space / IR ranking approach is useful but is not enough to get accurate detection IMHO. Eventually you need something which is not a probabilistic ma

The vector space / IR ranking approach is useful but is not enough to get accurate detection IMHO. Eventually you need something which is not a probabilistic match and the devils is the details. For instance a license notice may be as short as "mit" or "gpl" or "gpl2" or as long as a full AGPL license text or a long text with multiple licenses texts and notices. In these cases, the rankings are likely to be completely off and your GCC scan detects a few weird stuff for sure which are not right. So you can get a decent indication but it will be inaccurate often enough at scale.