See https://github.com/justinethier/cyclone/issues/475

README file is not a source of truth, since it's old
and contains reference to expect website no longer available

This:
https://core.tcl-lang.org/jenglish/gutter/packages/expect.html

And this FAQ:
http://expect.sourceforge.net/FAQ.html#q6

Are in agreement with "Public Domain license"

The closest PD license is NIST-PD (since expect is developed by NIST)

https://spdx.org/licenses/NIST-PD.html

Debian uses "PD License"
https://metadata.ftp-master.debian.org/changelogs//main/e/expect/expect_5.45.4-2_copyright

but is not a valid SPDX identifier

This patch fix the issue #12774

Alex Xu (Hello71) authored 3 years ago and Francesco Colista committed 3 years ago

code quality is still awful but hopefully works slightly better now?

fixes #10938

This reverts commit 483357d8.

fixes CVE-2021-36386