aboutcode-org / aboutcode-org/dejacode

Problems creating a package from a SourceForge download URL

Aperta
#26 13 commenti 0 reazioni 2 assegnatari Rivendicata da @pombredanne Vedi su GitHub
help wanted integration question
Lingua principale
Python
Stelle
50
Fork
27
Merge medio
4h 51m
PR unite (30g)
11

Descrizione

Perhaps this is a user "pilot" error, but when I create a Package in DejaCode from a SourceForge download URL, I get strange results. A recent Add Package using
https://sourceforge.net/projects/scribus/files/scribus/1.6.0/scribus-1.6.0.tar.gz/download
resulted in a Package with a filename of `download` rather than `scribus-1.6.0.tar.gz`.
It also resulted in the rather verbose PURL value of
`pkg:generic/download?download_url=https://sourceforge.net/projects/scribus/files/scribus/1.6.0/scribus-1.6.0.tar.gz/download`

I scanned the package, using the same download URL, directly in SCIO v32.0.8, and it returned a PURL value of
`pkg:autotools/scribus-1.6.0`
in the key_files_packages section

So it appears that the rather eccentric download conventions of SourceForge are messing things up a bit.
* Can we improve DejaCode to interpret the results of such a scan differently?
* Does such an improvement rather belong in SCIO?
* or should we prompt the DejaCode user with instructions how to provide a different, better, less eccentric download URL when processing a SourceForge package?

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.