aboutcode-org / aboutcode-org/purldb

minecode-pipelines: update pipelines to save api calls as well as purls

未关闭
#845 1 条评论 0 个 reaction 已指派 1 人 已被 @JonoYang 认领 在 GitHub 查看
主要语言
HTML
星标
67
派生
69
平均合并
8 天 8 小时
30 天内合并 PR
1

描述

issues with miners and saving metadata

crates.io
- the index is organizied by some hashing thing, and the package data is stored in json lines
- how should we store the upstream metadata in the aboutcode-data repos? should we store the json line entry or recreate the directory structure of the index?

maven
- not certain if the parser we use for parsing the maven index gives us all the fields of pom data
- updating the web crawler should be easy enough as it gets the pom files directly

npm
- the code only looks up the index for the package name and versions and reports those. it does not get the package data proper. the code would need to be updated to have an option to get and store the package data

nuget
- all package data is stored in a single index file, do we save individual index files for each package version we get?

pypi
- update code to dump jsons for individual packages

alpine
- should we save the info of the package individually or just save the apkindex for all packages

composer
- update `get_composer_purl` to save package data alongside purl

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。