aboutcode-org / aboutcode-org/scancode-toolkit

Scancode for licenses scans the same package from different sources

Aperta
#4,144 6 commenti 0 reazioni 0 assegnatari Vedi su GitHub
bug
Lingua principale
Python
Stelle
2.6k
Fork
791
Merge medio
1g 12h
PR unite (30g)
5

Descrizione

### Description

I am only looking to use scancode to check licenses in my project, and it runs extremely slowly, even when limited to only looking through the package.json files in my repo. I believe scancode doesn't optimize for when multiple installed packages have the same dependency, and it will scan that dependency many times. This causes it to take ~30 minutes to run, whereas this [license compliance package](https://www.npmjs.com/package/license-compliance) runs in under 10 seconds. I would prefer using scancode over this package, however I can't justify a 30 minute run.

### How To Reproduce

> Tell us how to reproduce the issue.

Install multiple npm packages that share the same peer dependency and run `scancode --licenses`

### System configuration

> For bug reports, it really helps us to know:

* What OS are you running on? (Windows/MacOS/Linux)
* What version of scancode-toolkit was used to generate the scan file?
* What installation method was used to install/run scancode? (pip/source download/other)

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.