aboutcode-org / aboutcode-org/scancode-toolkit

Properly detect Alpine virtual packages

未关闭
#2,774 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug package scan
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

### Description

Alpine linux installed packages may be "virtual" such as with this snippet of installed DB
```
P:.postgis-rundeps
V:20210104.190748
A:noarch
S:0
I:0
T:virtual meta package
U:
L:
D:json-c geos gdal proj protobuf-c libstdc++
```

This was created from this https://github.com/postgis/docker-postgis/blob/e5e0e9b3b38acb6e4f1f16ed0c697c9f6cb2cf1e/Dockerfile.alpine.template#L61

`.postgis-rundeps` was created at install time and does not exist as a "real" package. This is instead just a collection of dependencies, therefore it cannot have much of an origin or license. This is a "virtual meta package". It can be identified because of its installed "description" with this value "T:virtual meta package"

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。