aboutcode-org / aboutcode-org/scancode-toolkit

Invalid dependency created when scanning gemspec

Open
#3,088 0 comments 0 reactions 0 assignees View on GitHub
bug package scan
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

I've scanned the gemspec https://raw.githubusercontent.com/logstash-plugins/logstash-mixin-ecs_compatibility_support/main/logstash-mixin-ecs_compatibility_support.gemspec and in the dependency results, there is an invalid dependency created from the description (https://github.com/logstash-plugins/logstash-mixin-ecs_compatibility_support/blob/main/logstash-mixin-ecs_compatibility_support.gemspec#L6)

The created dependency in question:
```
{
"purl": "pkg:gem/this%20adapter%20provides%20an%20implementation%20of%20ECS-Compatibility%20mode%20that%20can%20be%20controlled%20at%20the%20plugin%20instance%20level.",
"extracted_requirement": "",
"scope": "dependency",
"is_runtime": true,
"is_optional": false,
"is_resolved": false,
"resolved_package": {},
"extra_data": {}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.