aboutcode-org / aboutcode-org/scancode-toolkit

package scan requirement value confused

Ouverte
#2,753 1 commentaire 0 réactions 0 personnes assignées Voir sur GitHub
bug dependencies package scan
Langage dominant
Python
Étoiles
2.6k
Forks
791
Merge moyen
1 j 12 h
PR mergées (30 j)
5

Description

### Description
When trying to scan the project https://github.com/pallets/flask with latest scancode
The file is: https://github.com/pallets/flask/blob/main/examples/javascript/setup.cfg
It get the following result:
value of requirement in dependencies is confused, whether the key requirement means dependency version requirement?
```
"files": [
{
"path": "setup.cfg",
"type": "file",
"packages": [
{
"type": "pypi",
"namespace": null,
"name": null,
"version": null,
"qualifiers": {},
"subpath": null,
"primary_language": "Python",
"description": null,
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": null,
"dependencies": [
{
"purl": "pkg:pypi/flask",
"requirement": "Flask",
"scope": "install",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
},
{
"purl": "pkg:pypi/pytest",
"requirement": "pytest",
"scope": "install",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
},
{
"purl": "pkg:pypi/blinker",
"requirement": "blinker",
"scope": "install",
"is_runtime": true,
"is_optional": false,
"is_resolved": false
}
],
"contains_source_code": null,
"source_packages": [],
"extra_data": {},
"purl": null,
"repository_homepage_url": null,
"repository_download_url": null,
"api_data_url": null
}
],
"scan_errors": []
}
```

### How To Reproduce

scancode -p --json-pp - setup.cfg

### System configuration

* What OS are you running on? (Windows/MacOS/Linux)
Ubuntu18.04
* What version of scancode-toolkit was used to generate the scan file?
scancode-toolkit 30.1.0
* What installation method was used to install/run scancode? (pip/source download/other)
pip
* Python version
Python 3.7.10

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.