aboutcode-org / aboutcode-org/scancode-toolkit

Scan only the code that is actually beeing used in packages Python

未关闭
#3,284 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
new feature
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

## Short Description
Add the ability to only scan the packages that are actually being used by the code scanned. to be specific, many python packages have optional dependencies for testing, documentation or extra abilities that you might not use thus don't want to report out. the ability to filter those out would help creating OSN's.

## Possible Labels

- improve-license-detection
- license scan

## Select Category

- [x] Enhancement
- [ ] Add License/Copyright
- [ ] Scan Feature
- [ ] Packaging
- [ ] Documentation
- [ ] Expand Support
- [ ] Other

## **Describe the Update**
The feature is to add a configuration in which the installation option for each package is taken into account. meaning if a package is not fully installed not all of its dependencies would be reported.

## **How This Feature will help you/your organization**
When we give open source notices for out clients we need to report only the licenses that are being used. we can only use permissive licenses like MIT and some packages we use have GPL dependencies on their optional installation option. so its takes a lot of time to filter those out, and is hard to automate.

## **Can you help with this Feature**

An example of a package with GPL and non GPL dependencies
https://github.com/python-jsonschema/jsonschema

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。