aboutcode-org / aboutcode-org/scancode-toolkit
Report .nupkg archives as proper Packages
Open
enhancement
package scan
package-formats
- Dominant language
- Python
- Stars
- 2.6k
- Forks
- 791
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 5
Description
Today only .nuspec "manifests" are detected and reported as a "Package" in a scan.
This works for .nupkg only if they have been extracted before the scan and this is not practical to always do so. We should be able to report and introspect in a scanned archived package to report this as a package with all its metadata.
See also #797 and #222 and #761
Contributor guide
Assessment
This issue has not been assessed yet.