aboutcode-org / aboutcode-org/scancode-toolkit

Dependent packages not being created for dependencies from the dependencyManagement field from a POM

Open
#2,103 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

The pom parser collects the dependent package data from the dependencyManagement field from a POM, but we do not add that data to the scan results.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.