aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect package detection in Kafka 2.6

Offen
#2,254 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
bug package scan package-formats
Vorherrschende Sprache
Python
Sterne
2.6k
Forks
791
Ø Merge
1 T. 12 Std.
Gemergte PRs (30 T.)
5

Beschreibung

### Description
When scanning https://www.apache.org/dyn/closer.cgi?path=/kafka/2.6.0/kafka-2.6.0-src.tgz the attached pom.xml at [pom.xml.txt](https://github.com/nexB/scancode-toolkit/files/5300422/pom.xml.txt) found in `kafka-2.6.0/streams/quickstart/java/src/main/resources/archetype-resources/pom.xml` yield this --package scan:
```
{
"path": "quickstart/java/src/main/resources/archetype-resources/pom.xml",
"type": "file",
"packages": [
{
"type": "maven",
"namespace": "${groupId}",
"name": "${artifactId}",
"version": "${version}",
"qualifiers": {},
"subpath": null,
"primary_language": "Java",
"description": "Kafka Streams Quickstart :: Java",
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": "quickstart/java/src/main/resources/archetype-resources",
"dependencies": [
{
"purl": "pkg:maven/org.apache.kafka/kafka-streams",
"requirement": "2.6.0",
"scope": "compile",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
}
],
"contains_source_code": null,
"source_packages": [
"pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D?classifier=sources"
],
"purl": "pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D",
"repository_homepage_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/",
"repository_download_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.jar",
"api_data_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.pom"
}
],
"scan_errors": []
},

```
This is junk and we should ignore this kind of things

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.