aboutcode-org / aboutcode-org/scancode-toolkit
Scan only the code that is actually beeing used in packages Python
- Vorherrschende Sprache
- Python
- Sterne
- 2.6k
- Forks
- 791
- Ø Merge
- 1 T. 12 Std.
- Gemergte PRs (30 T.)
- 5
Beschreibung
## Short Description
Add the ability to only scan the packages that are actually being used by the code scanned. to be specific, many python packages have optional dependencies for testing, documentation or extra abilities that you might not use thus don't want to report out. the ability to filter those out would help creating OSN's.
## Possible Labels
- improve-license-detection
- license scan
## Select Category
- [x] Enhancement
- [ ] Add License/Copyright
- [ ] Scan Feature
- [ ] Packaging
- [ ] Documentation
- [ ] Expand Support
- [ ] Other
## **Describe the Update**
The feature is to add a configuration in which the installation option for each package is taken into account. meaning if a package is not fully installed not all of its dependencies would be reported.
## **How This Feature will help you/your organization**
When we give open source notices for out clients we need to report only the licenses that are being used. we can only use permissive licenses like MIT and some packages we use have GPL dependencies on their optional installation option. so its takes a lot of time to filter those out, and is hard to automate.
## **Can you help with this Feature**
An example of a package with GPL and non GPL dependencies
https://github.com/python-jsonschema/jsonschema
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.