aboutcode-org / aboutcode-org/scancode-toolkit

Add support for binary package references

Open
#1,810 0 comments 0 reactions 0 assignees View on GitHub
new feature package scan package-formats
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description
We already track the sources packages of a package. We would need to track the inverse relationship which would be the "binary" or "built" packages from a "source" package (such as a Git repo or an upstream tarball).

See https://github.com/nexB/scancode-toolkit/blob/450205506989607c8361b17e1bce0db63c9923b2/src/packagedcode/models.py#L465

This would be a new attribute with this definition:
```
binary_packages = List(
item_type=String,
label='List of related binary packages',
help='A list of related binary (or built or derived) Package URLs (aka. "purl") for '
'this package. For instance an RPM archive or an npm tarball is the "binary package" for a '
'binary SRPM or upstream GitHub repository.')
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.