aboutcode-org / aboutcode-org/scancode-toolkit

Properly detect Alpine virtual packages

Aperta
#2,774 1 commento 0 reazioni 0 assegnatari Vedi su GitHub
bug package scan
Lingua principale
Python
Stelle
2.6k
Fork
791
Merge medio
1g 12h
PR unite (30g)
5

Descrizione

### Description

Alpine linux installed packages may be "virtual" such as with this snippet of installed DB
```
P:.postgis-rundeps
V:20210104.190748
A:noarch
S:0
I:0
T:virtual meta package
U:
L:
D:json-c geos gdal proj protobuf-c libstdc++
```

This was created from this https://github.com/postgis/docker-postgis/blob/e5e0e9b3b38acb6e4f1f16ed0c697c9f6cb2cf1e/Dockerfile.alpine.template#L61

`.postgis-rundeps` was created at install time and does not exist as a "real" package. This is instead just a collection of dependencies, therefore it cannot have much of an origin or license. This is a "virtual meta package". It can be identified because of its installed "description" with this value "T:virtual meta package"

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.