aboutcode-org / aboutcode-org/scancode-toolkit

Scan only the code that is actually beeing used in packages Python

オープン
#3,284 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る
new feature
主要言語
Python
スター
2.6k
フォーク
791
平均マージ
1日 12時間
マージ済み PR(30日)
5

説明

## Short Description
Add the ability to only scan the packages that are actually being used by the code scanned. to be specific, many python packages have optional dependencies for testing, documentation or extra abilities that you might not use thus don't want to report out. the ability to filter those out would help creating OSN's.

## Possible Labels

- improve-license-detection
- license scan

## Select Category

- [x] Enhancement
- [ ] Add License/Copyright
- [ ] Scan Feature
- [ ] Packaging
- [ ] Documentation
- [ ] Expand Support
- [ ] Other

## **Describe the Update**
The feature is to add a configuration in which the installation option for each package is taken into account. meaning if a package is not fully installed not all of its dependencies would be reported.

## **How This Feature will help you/your organization**
When we give open source notices for out clients we need to report only the licenses that are being used. we can only use permissive licenses like MIT and some packages we use have GPL dependencies on their optional installation option. so its takes a lot of time to filter those out, and is hard to automate.

## **Can you help with this Feature**

An example of a package with GPL and non GPL dependencies
https://github.com/python-jsonschema/jsonschema

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。