aboutcode-org / aboutcode-org/scancode-toolkit
Using the old spdx-tools 0.8.2 causes conflicts with other tools.
- Dominant language
- Python
- Stars
- 2.6k
- Forks
- 791
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 5
Description
### Description
> Since ntia-conformance-checker v5.0.0, spdx-tools 0.8.5 is used, but scancode toolkit uses spdx-tools 0.8.2, causing a version conflict.
### How To Reproduce
> [1] python -m pip install ntia_conformance_checker
> [2] python -m pip install scancode-toolkit
>>Using cached scancode_toolkit-32.5.0-cp312-none-any.whl (126.2 MB)
>>Using cached spdx_tools-0.8.2-py3-none-any.whl (285 kB)
>>Installing collected packages: spdx_tools, scancode-toolkit
>> Attempting uninstall: spdx_tools
>> Found existing installation: spdx-tools 0.8.5
>> Uninstalling spdx-tools-0.8.5:
>> Successfully uninstalled spdx-tools-0.8.5
>>ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
ntia-conformance-checker 5.0.1 requires spdx-tools>=0.8.5, but you have spdx-tools 0.8.2 which is incompatible.
>>Successfully installed scancode-toolkit-32.5.0 spdx_tools-0.8.2'
### System configuration
> For bug reports, it really helps us to know:
* What OS are you running on? Windows
* What version of scancode-toolkit was used to generate the scan file? 32.5.0
* What installation method was used to install/run scancode? pip
Contributor guide
Assessment
This issue has not been assessed yet.