aboutcode-org / aboutcode-org/scancode-toolkit
RFC: Introduce "primary package" vs. "embedded- or sub-packages"
Open
new feature
package scan
package-at-toplevel
package-files
primary-summary
RFC
- Dominant language
- Python
- Stars
- 2.6k
- Forks
- 791
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 5
Description
## Short Description
In the same way we have dependencies, we often have:
- a package within a package such as a node_modules in an npm, mono-repos, uberjars and fatjars, and similar
- multiple personalities for the same package (bower and npm)
We should have a heuristic to report one of these has primary and the other as sub/embedded packages.
This would likely be done in a post-scan step.
Data-wise this could be a list of Package URL similar to what we have for dependencies.
## Select Category
- [x] Enhancement
Contributor guide
Assessment
This issue has not been assessed yet.