aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect package detection in Kafka 2.6

Ouverte
#2,254 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
bug package scan package-formats
Langage dominant
Python
Étoiles
2.6k
Forks
791
Merge moyen
1 j 12 h
PR mergées (30 j)
5

Description

### Description
When scanning https://www.apache.org/dyn/closer.cgi?path=/kafka/2.6.0/kafka-2.6.0-src.tgz the attached pom.xml at [pom.xml.txt](https://github.com/nexB/scancode-toolkit/files/5300422/pom.xml.txt) found in `kafka-2.6.0/streams/quickstart/java/src/main/resources/archetype-resources/pom.xml` yield this --package scan:
```
{
"path": "quickstart/java/src/main/resources/archetype-resources/pom.xml",
"type": "file",
"packages": [
{
"type": "maven",
"namespace": "${groupId}",
"name": "${artifactId}",
"version": "${version}",
"qualifiers": {},
"subpath": null,
"primary_language": "Java",
"description": "Kafka Streams Quickstart :: Java",
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": "quickstart/java/src/main/resources/archetype-resources",
"dependencies": [
{
"purl": "pkg:maven/org.apache.kafka/kafka-streams",
"requirement": "2.6.0",
"scope": "compile",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
}
],
"contains_source_code": null,
"source_packages": [
"pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D?classifier=sources"
],
"purl": "pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D",
"repository_homepage_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/",
"repository_download_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.jar",
"api_data_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.pom"
}
],
"scan_errors": []
},

```
This is junk and we should ignore this kind of things

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.