aboutcode-org / aboutcode-org/scancode-toolkit

Properly detect Alpine virtual packages

Ouverte
#2,774 1 commentaire 0 réactions 0 personnes assignées Voir sur GitHub
bug package scan
Langage dominant
Python
Étoiles
2.6k
Forks
791
Merge moyen
1 j 12 h
PR mergées (30 j)
5

Description

### Description

Alpine linux installed packages may be "virtual" such as with this snippet of installed DB
```
P:.postgis-rundeps
V:20210104.190748
A:noarch
S:0
I:0
T:virtual meta package
U:
L:
D:json-c geos gdal proj protobuf-c libstdc++
```

This was created from this https://github.com/postgis/docker-postgis/blob/e5e0e9b3b38acb6e4f1f16ed0c697c9f6cb2cf1e/Dockerfile.alpine.template#L61

`.postgis-rundeps` was created at install time and does not exist as a "real" package. This is instead just a collection of dependencies, therefore it cannot have much of an origin or license. This is a "virtual meta package". It can be identified because of its installed "description" with this value "T:virtual meta package"

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.