aboutcode-org / aboutcode-org/scancode.io

Detected package doesn't exist in the "for_packages" field

Abierto
#1,272 0 comentarios 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
215
Forks
203
Merge medio
4 d 8 h
PR fusionados (30 d)
6

Descripción

I am confused with the data (This is the data from SCIO scan downloaded with xlsx output). Following is a sample:

There are 22 line items for dist-datatables-select-1.3.3.jar in the "RESOURCES"
```
dist-datatables-select-1.3.3.jar
dist-datatables-select-1.3.3.jar-extract
dist-datatables-select-1.3.3.jar-extract/META-INF
dist-datatables-select-1.3.3.jar-extract/META-INF/maven
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select/pom.properties
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select/pom.xml
dist-datatables-select-1.3.3.jar-extract/META-INF/resources
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/.bower.json
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/bower.json
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/composer.lock
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/js
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/js/dataTables.select.js
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/js/dataTables.select.min.js
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/License.txt
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/nuget.nuspec
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/package-lock.json
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/Readme.md
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/types.d.ts
```
In the "PACKAGES", there is `pkg:maven/org.webjars.bowergithub.datatables/dist-datatables-select@1.3.3` with datafile_paths: `Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select/pom.xml`

However, there is no "for_packages" value in the "RESOURCES" worksheet for this pom.xml
In fact, none of the above 22 items have this purl.
Instead,

`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/.bower.json`
has for_packages:
```
pkg:bower/SpryMedia%20Ltd@1.3.3?uuid=90dd68e9-bad6-49e0-baa7-5226d517b45f
```

`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/bower.json`
has for_packages:
```
pkg:bower/SpryMedia%20Ltd?uuid=d841918d-1ff8-4e9f-95cf-70bcfafbcf5e
```

`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/composer.lock`
has for packages:
```
pkg:composer/components/jquery@3.5.1?uuid=3a70bc39-c6d6-48a9-9400-129978632547
pkg:composer/components/jquery@3.5.1?uuid=f1d0976b-1138-4a9f-b3cd-49c578bb7f64
pkg:composer/components/jquery@3.5.1?uuid=846f2cf4-6992-4525-b910-4f1528e63ec2
```

`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/nuget.nuspec`
has for_packages:
```
pkg:nuget/datatables.net-select@1.3.3?uuid=4e5cdd7b-438d-46c1-83ad-15ab4a9e5919
```
Issues are:
1. There are many files that don't have for_packages value in "RESOURCES"
2. The detected package doesn't exist in the "for_packages" field in "RESOURCES" (i.e. the whole "RESOURCES" worksheet doesn't have `pkg:maven/org.webjars.bowergithub.datatables/dist-datatables-select@1.3.3` in the "for_packages" field)
3. From the above, other that pkg:nuget/datatables.net-select@1.3.3?uuid=4e5cdd7b-438d-46c1-83ad-15ab4a9e5919, the other "for_packages" value don't seem to make sense to me, bug?

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.