aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect Maven packages reported when scanning build.gradle for an Android app

Abierto
#4,521 2 comentarios 0 reacciones 0 asignados Ver en GitHub
bug package scan package-formats
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

While scanning F-droid sources at:
https://staging.scancode.io/project/fdroid-source-99ed4069/download_input/org.fdroid.fdroid_1023051_src.tar.gz/
these are "implementation" deps from a gradle build:
```
dependencies {
implementation project(":libs:download")
implementation project(":libs:index")
implementation project(":libs:database")
implementation libs.androidx.appcompat
implementation libs.androidx.preference.ktx
implementation libs.androidx.gridlayout
implementation libs.androidx.recyclerview
implementation libs.androidx.vectordrawable
implementation libs.androidx.constraintlayout
implementation libs.androidx.lifecycle.livedata.ktx
implementation libs.androidx.work.runtime
implementation libs.guava // somehow needed for work-runtime to function

implementation libs.material

//noinspection UseTomlInstead
implementation('com.journeyapps:zxing-android-embedded:4.3.0') { transitive = false }
implementation libs.zxing.core
implementation libs.guardianproject.netcipher
implementation libs.commons.io
implementation libs.commons.net
implementation libs.acra.mail
implementation libs.acra.dialog
implementation libs.adapterdelegates4
implementation libs.slf4j.api
implementation libs.logback.android

implementation libs.rxjava
implementation libs.rxandroid

implementation libs.glide
implementation(libs.glide.compose)
annotationProcessor libs.glide.compiler

implementation libs.okhttp
implementation libs.bcprov.jdk15to18
fullImplementation libs.guardianproject.panic
fullImplementation libs.bcpkix.jdk15to18
fullImplementation libs.jmdns
fullImplementation libs.nanohttpd
```

these are reported as:
```
pkg:maven/
accompanist
pkg:maven/acra
pkg:maven/acra
pkg:maven/adapterdelegates4
pkg:maven/androidx
...
```

which is incomplete or incorrect.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.