aboutcode-org / aboutcode-org/scancode-toolkit

RFC: Introduce "primary package" vs. "embedded- or sub-packages"

未關閉
#2,418 7 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
new feature package scan package-at-toplevel package-files primary-summary RFC
主要語言
Python
星號
2.6k
分支
791
平均合併
1 天 12 小時
30 天內合併 PR
5

描述

## Short Description
In the same way we have dependencies, we often have:
- a package within a package such as a node_modules in an npm, mono-repos, uberjars and fatjars, and similar
- multiple personalities for the same package (bower and npm)

We should have a heuristic to report one of these has primary and the other as sub/embedded packages.
This would likely be done in a post-scan step.
Data-wise this could be a list of Package URL similar to what we have for dependencies.

## Select Category
- [x] Enhancement

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。