aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect Maven packages reported when scanning build.gradle for an Android app

Đang mở
#4,521 2 bình luận 0 reaction 0 người được giao Xem trên GitHub
bug package scan package-formats
Ngôn ngữ chính
Python
Star
2.6k
Fork
791
Merge trung bình
1 ngày 12 giờ
Pull request đã merge (30 ngày)
5

Mô tả

While scanning F-droid sources at:
https://staging.scancode.io/project/fdroid-source-99ed4069/download_input/org.fdroid.fdroid_1023051_src.tar.gz/
these are "implementation" deps from a gradle build:
```
dependencies {
implementation project(":libs:download")
implementation project(":libs:index")
implementation project(":libs:database")
implementation libs.androidx.appcompat
implementation libs.androidx.preference.ktx
implementation libs.androidx.gridlayout
implementation libs.androidx.recyclerview
implementation libs.androidx.vectordrawable
implementation libs.androidx.constraintlayout
implementation libs.androidx.lifecycle.livedata.ktx
implementation libs.androidx.work.runtime
implementation libs.guava // somehow needed for work-runtime to function

implementation libs.material

//noinspection UseTomlInstead
implementation('com.journeyapps:zxing-android-embedded:4.3.0') { transitive = false }
implementation libs.zxing.core
implementation libs.guardianproject.netcipher
implementation libs.commons.io
implementation libs.commons.net
implementation libs.acra.mail
implementation libs.acra.dialog
implementation libs.adapterdelegates4
implementation libs.slf4j.api
implementation libs.logback.android

implementation libs.rxjava
implementation libs.rxandroid

implementation libs.glide
implementation(libs.glide.compose)
annotationProcessor libs.glide.compiler

implementation libs.okhttp
implementation libs.bcprov.jdk15to18
fullImplementation libs.guardianproject.panic
fullImplementation libs.bcpkix.jdk15to18
fullImplementation libs.jmdns
fullImplementation libs.nanohttpd
```

these are reported as:
```
pkg:maven/
accompanist
pkg:maven/acra
pkg:maven/acra
pkg:maven/adapterdelegates4
pkg:maven/androidx
...
```

which is incomplete or incorrect.

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.