aboutcode-org / aboutcode-org/scancode-toolkit

RFC: Introduce "primary package" vs. "embedded- or sub-packages"

Abierto
#2,418 7 comentarios 0 reacciones 0 asignados Ver en GitHub
new feature package scan package-at-toplevel package-files primary-summary RFC
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

## Short Description
In the same way we have dependencies, we often have:
- a package within a package such as a node_modules in an npm, mono-repos, uberjars and fatjars, and similar
- multiple personalities for the same package (bower and npm)

We should have a heuristic to report one of these has primary and the other as sub/embedded packages.
This would likely be done in a post-scan step.
Data-wise this could be a list of Package URL similar to what we have for dependencies.

## Select Category
- [x] Enhancement

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.