aboutcode-org / aboutcode-org/scancode-toolkit

Unresolved runtime dependencies

Open
#3,616 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

I have done a scan with this command "scancode --license --copyright --package --info" and it seems that it cannot resolve licenses for runtime dependencies found in npm package.json file.

Example:

"purl":"pkg:npm/bluebird"
"extracted_requirement":"^3.5.3"
"scope":"dependencies"
"is_runtime":true
"is_optional":false
"is_resolved":false
"resolved_package":{}0 items

Scancode v32.0.8 and python 3.11 on Windows

I would expect it to find an MIT license for this package...

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.