aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect Maven packages reported when scanning build.gradle for an Android app

Aberta
#4,521 2 comentários 0 reações 0 responsáveis Ver no GitHub
bug package scan package-formats
Linguagem predominante
Python
Estrelas
2.6k
Forks
791
Merge médio
1d 12h
PRs com merge (30d)
5

Descrição

While scanning F-droid sources at:
https://staging.scancode.io/project/fdroid-source-99ed4069/download_input/org.fdroid.fdroid_1023051_src.tar.gz/
these are "implementation" deps from a gradle build:
```
dependencies {
implementation project(":libs:download")
implementation project(":libs:index")
implementation project(":libs:database")
implementation libs.androidx.appcompat
implementation libs.androidx.preference.ktx
implementation libs.androidx.gridlayout
implementation libs.androidx.recyclerview
implementation libs.androidx.vectordrawable
implementation libs.androidx.constraintlayout
implementation libs.androidx.lifecycle.livedata.ktx
implementation libs.androidx.work.runtime
implementation libs.guava // somehow needed for work-runtime to function

implementation libs.material

//noinspection UseTomlInstead
implementation('com.journeyapps:zxing-android-embedded:4.3.0') { transitive = false }
implementation libs.zxing.core
implementation libs.guardianproject.netcipher
implementation libs.commons.io
implementation libs.commons.net
implementation libs.acra.mail
implementation libs.acra.dialog
implementation libs.adapterdelegates4
implementation libs.slf4j.api
implementation libs.logback.android

implementation libs.rxjava
implementation libs.rxandroid

implementation libs.glide
implementation(libs.glide.compose)
annotationProcessor libs.glide.compiler

implementation libs.okhttp
implementation libs.bcprov.jdk15to18
fullImplementation libs.guardianproject.panic
fullImplementation libs.bcpkix.jdk15to18
fullImplementation libs.jmdns
fullImplementation libs.nanohttpd
```

these are reported as:
```
pkg:maven/
accompanist
pkg:maven/acra
pkg:maven/acra
pkg:maven/adapterdelegates4
pkg:maven/androidx
...
```

which is incomplete or incorrect.

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.