aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect package detection in Kafka 2.6

Abierto
#2,254 0 comentarios 0 reacciones 0 asignados Ver en GitHub
bug package scan package-formats
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

### Description
When scanning https://www.apache.org/dyn/closer.cgi?path=/kafka/2.6.0/kafka-2.6.0-src.tgz the attached pom.xml at [pom.xml.txt](https://github.com/nexB/scancode-toolkit/files/5300422/pom.xml.txt) found in `kafka-2.6.0/streams/quickstart/java/src/main/resources/archetype-resources/pom.xml` yield this --package scan:
```
{
"path": "quickstart/java/src/main/resources/archetype-resources/pom.xml",
"type": "file",
"packages": [
{
"type": "maven",
"namespace": "${groupId}",
"name": "${artifactId}",
"version": "${version}",
"qualifiers": {},
"subpath": null,
"primary_language": "Java",
"description": "Kafka Streams Quickstart :: Java",
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": "quickstart/java/src/main/resources/archetype-resources",
"dependencies": [
{
"purl": "pkg:maven/org.apache.kafka/kafka-streams",
"requirement": "2.6.0",
"scope": "compile",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
}
],
"contains_source_code": null,
"source_packages": [
"pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D?classifier=sources"
],
"purl": "pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D",
"repository_homepage_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/",
"repository_download_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.jar",
"api_data_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.pom"
}
],
"scan_errors": []
},

```
This is junk and we should ignore this kind of things

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.