aboutcode-org / aboutcode-org/scancode-toolkit

RFC: Introduce "primary package" vs. "embedded- or sub-packages"

未关闭
#2,418 7 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
new feature package scan package-at-toplevel package-files primary-summary RFC
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

## Short Description
In the same way we have dependencies, we often have:
- a package within a package such as a node_modules in an npm, mono-repos, uberjars and fatjars, and similar
- multiple personalities for the same package (bower and npm)

We should have a heuristic to report one of these has primary and the other as sub/embedded packages.
This would likely be done in a post-scan step.
Data-wise this could be a list of Package URL similar to what we have for dependencies.

## Select Category
- [x] Enhancement

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。