aboutcode-org / aboutcode-org/scancode-toolkit

Invalid dependency created when scanning gemspec

未关闭
#3,088 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug package scan
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

I've scanned the gemspec https://raw.githubusercontent.com/logstash-plugins/logstash-mixin-ecs_compatibility_support/main/logstash-mixin-ecs_compatibility_support.gemspec and in the dependency results, there is an invalid dependency created from the description (https://github.com/logstash-plugins/logstash-mixin-ecs_compatibility_support/blob/main/logstash-mixin-ecs_compatibility_support.gemspec#L6)

The created dependency in question:
```
{
"purl": "pkg:gem/this%20adapter%20provides%20an%20implementation%20of%20ECS-Compatibility%20mode%20that%20can%20be%20controlled%20at%20the%20plugin%20instance%20level.",
"extracted_requirement": "",
"scope": "dependency",
"is_runtime": true,
"is_optional": false,
"is_resolved": false,
"resolved_package": {},
"extra_data": {}
}
```

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。