aboutcode-org / aboutcode-org/scancode-toolkit

Properly detect Alpine virtual packages

Offen
#2,774 1 Kommentar 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
bug package scan
Vorherrschende Sprache
Python
Sterne
2.6k
Forks
791
Ø Merge
1 T. 12 Std.
Gemergte PRs (30 T.)
5

Beschreibung

### Description

Alpine linux installed packages may be "virtual" such as with this snippet of installed DB
```
P:.postgis-rundeps
V:20210104.190748
A:noarch
S:0
I:0
T:virtual meta package
U:
L:
D:json-c geos gdal proj protobuf-c libstdc++
```

This was created from this https://github.com/postgis/docker-postgis/blob/e5e0e9b3b38acb6e4f1f16ed0c697c9f6cb2cf1e/Dockerfile.alpine.template#L61

`.postgis-rundeps` was created at install time and does not exist as a "real" package. This is instead just a collection of dependencies, therefore it cannot have much of an origin or license. This is a "virtual meta package". It can be identified because of its installed "description" with this value "T:virtual meta package"

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.