aboutcode-org / aboutcode-org/scancode-toolkit

Scancode for licenses scans the same package from different sources

未关闭
#4,144 6 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

### Description

I am only looking to use scancode to check licenses in my project, and it runs extremely slowly, even when limited to only looking through the package.json files in my repo. I believe scancode doesn't optimize for when multiple installed packages have the same dependency, and it will scan that dependency many times. This causes it to take ~30 minutes to run, whereas this [license compliance package](https://www.npmjs.com/package/license-compliance) runs in under 10 seconds. I would prefer using scancode over this package, however I can't justify a 30 minute run.

### How To Reproduce

> Tell us how to reproduce the issue.

Install multiple npm packages that share the same peer dependency and run `scancode --licenses`

### System configuration

> For bug reports, it really helps us to know:

* What OS are you running on? (Windows/MacOS/Linux)
* What version of scancode-toolkit was used to generate the scan file?
* What installation method was used to install/run scancode? (pip/source download/other)

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。