aboutcode-org / aboutcode-org/scancode-toolkit
RFC: Introduce "primary package" vs. "embedded- or sub-packages"
Offen
new feature
package scan
package-at-toplevel
package-files
primary-summary
RFC
- Vorherrschende Sprache
- Python
- Sterne
- 2.6k
- Forks
- 791
- Ø Merge
- 1 T. 12 Std.
- Gemergte PRs (30 T.)
- 5
Beschreibung
## Short Description
In the same way we have dependencies, we often have:
- a package within a package such as a node_modules in an npm, mono-repos, uberjars and fatjars, and similar
- multiple personalities for the same package (bower and npm)
We should have a heuristic to report one of these has primary and the other as sub/embedded packages.
This would likely be done in a post-scan step.
Data-wise this could be a list of Package URL similar to what we have for dependencies.
## Select Category
- [x] Enhancement
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.