aboutcode-org / aboutcode-org/scancode-toolkit

Improve the granularity of detection within go.sum/go.mod

Open
#2,511 0 comments 0 reactions 0 assignees View on GitHub
dependencies enhancement package scan package-formats
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description

It would be great to improve the granularity of detection within go.sum/go.mod especially since:
1. both files may contains redundant dependencies
2. from and origin and license perspective the is too much details with all the imported subdirectories
3. there are typically test tools or test-only imports that are present in go.sum/go.mod but never used in a built production binary

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.