aboutcode-org / aboutcode-org/scancode-toolkit

Scan only the code that is actually beeing used in packages Python

Aperta
#3,284 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
new feature
Lingua principale
Python
Stelle
2.6k
Fork
791
Merge medio
1g 12h
PR unite (30g)
5

Descrizione

## Short Description
Add the ability to only scan the packages that are actually being used by the code scanned. to be specific, many python packages have optional dependencies for testing, documentation or extra abilities that you might not use thus don't want to report out. the ability to filter those out would help creating OSN's.

## Possible Labels

- improve-license-detection
- license scan

## Select Category

- [x] Enhancement
- [ ] Add License/Copyright
- [ ] Scan Feature
- [ ] Packaging
- [ ] Documentation
- [ ] Expand Support
- [ ] Other

## **Describe the Update**
The feature is to add a configuration in which the installation option for each package is taken into account. meaning if a package is not fully installed not all of its dependencies would be reported.

## **How This Feature will help you/your organization**
When we give open source notices for out clients we need to report only the licenses that are being used. we can only use permissive licenses like MIT and some packages we use have GPL dependencies on their optional installation option. so its takes a lot of time to filter those out, and is hard to automate.

## **Can you help with this Feature**

An example of a package with GPL and non GPL dependencies
https://github.com/python-jsonschema/jsonschema

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.