aboutcode-org / aboutcode-org/scancode-toolkit
Incorrect package detection in Kafka 2.6
- 主要語言
- Python
- 星號
- 2.6k
- 分支
- 791
- 平均合併
- 1 天 12 小時
- 30 天內合併 PR
- 5
描述
### Description
When scanning https://www.apache.org/dyn/closer.cgi?path=/kafka/2.6.0/kafka-2.6.0-src.tgz the attached pom.xml at [pom.xml.txt](https://github.com/nexB/scancode-toolkit/files/5300422/pom.xml.txt) found in `kafka-2.6.0/streams/quickstart/java/src/main/resources/archetype-resources/pom.xml` yield this --package scan:
```
{
"path": "quickstart/java/src/main/resources/archetype-resources/pom.xml",
"type": "file",
"packages": [
{
"type": "maven",
"namespace": "${groupId}",
"name": "${artifactId}",
"version": "${version}",
"qualifiers": {},
"subpath": null,
"primary_language": "Java",
"description": "Kafka Streams Quickstart :: Java",
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": "quickstart/java/src/main/resources/archetype-resources",
"dependencies": [
{
"purl": "pkg:maven/org.apache.kafka/kafka-streams",
"requirement": "2.6.0",
"scope": "compile",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
}
],
"contains_source_code": null,
"source_packages": [
"pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D?classifier=sources"
],
"purl": "pkg:maven/%24%7BgroupId%7D/%24%7BartifactId%7D@%24%7Bversion%7D",
"repository_homepage_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/",
"repository_download_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.jar",
"api_data_url": "https://repo1.maven.org/maven2/${groupId}/${artifactId}/${version}/${artifactId}-${version}.pom"
}
],
"scan_errors": []
},
```
This is junk and we should ignore this kind of things
貢獻指南
評估
這個 Issue 還沒有評估資料。