aboutcode-org / aboutcode-org/purldb

Rework how parent/ancestor pom information is collected and used during on-demand maven mining

未關閉
#160 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
HTML
星號
67
分支
69
平均合併
8 天 8 小時
30 天內合併 PR
1

描述

I was running a script to fetch license information for maven packages without a declared license expression. This script uses code from `minecode/visitors/maven.py`. However, my script appeared to not update the declared license expression for those packages. I debugged a bit and found that we are running into the situation where the parent poms for a maven package have a different namespace than the the package we're looking at, and (in certain cases) is preventing us from getting a license expression.

We should look into relaxing this constraint: https://github.com/nexB/purldb/blob/main/minecode/visitors/maven.py#L258

@pombredanne suggests that we should ignore certain parent poms, like https://github.com/sonatype/oss-parents . Another idea would be to save maven packages that are parent poms to the db and add those to the package sets for packages that get its license from the parent.

貢獻指南

這個儲存庫沒有索引到貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。