aboutcode-org / aboutcode-org/scancode.io
Detected package doesn't exist in the "for_packages" field
- 主要言語
- Python
- スター
- 215
- フォーク
- 203
- 平均マージ
- 4日 8時間
- マージ済み PR(30日)
- 6
説明
I am confused with the data (This is the data from SCIO scan downloaded with xlsx output). Following is a sample:
There are 22 line items for dist-datatables-select-1.3.3.jar in the "RESOURCES"
```
dist-datatables-select-1.3.3.jar
dist-datatables-select-1.3.3.jar-extract
dist-datatables-select-1.3.3.jar-extract/META-INF
dist-datatables-select-1.3.3.jar-extract/META-INF/maven
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select/pom.properties
dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select/pom.xml
dist-datatables-select-1.3.3.jar-extract/META-INF/resources
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/.bower.json
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/bower.json
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/composer.lock
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/js
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/js/dataTables.select.js
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/js/dataTables.select.min.js
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/License.txt
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/nuget.nuspec
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/package-lock.json
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/Readme.md
dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/types.d.ts
```
In the "PACKAGES", there is `pkg:maven/org.webjars.bowergithub.datatables/dist-datatables-select@1.3.3` with datafile_paths: `Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/maven/org.webjars.bowergithub.datatables/dist-datatables-select/pom.xml`
However, there is no "for_packages" value in the "RESOURCES" worksheet for this pom.xml
In fact, none of the above 22 items have this purl.
Instead,
`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/.bower.json`
has for_packages:
```
pkg:bower/SpryMedia%20Ltd@1.3.3?uuid=90dd68e9-bad6-49e0-baa7-5226d517b45f
```
`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/bower.json`
has for_packages:
```
pkg:bower/SpryMedia%20Ltd?uuid=d841918d-1ff8-4e9f-95cf-70bcfafbcf5e
```
`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/composer.lock`
has for packages:
```
pkg:composer/components/jquery@3.5.1?uuid=3a70bc39-c6d6-48a9-9400-129978632547
pkg:composer/components/jquery@3.5.1?uuid=f1d0976b-1138-4a9f-b3cd-49c578bb7f64
pkg:composer/components/jquery@3.5.1?uuid=846f2cf4-6992-4525-b910-4f1528e63ec2
```
`Server.zip-extract/Server/srv-boot.jar-extract/BOOT-INF/lib/dist-datatables-select-1.3.3.jar-extract/META-INF/resources/webjars/datatables.net-select/nuget.nuspec`
has for_packages:
```
pkg:nuget/datatables.net-select@1.3.3?uuid=4e5cdd7b-438d-46c1-83ad-15ab4a9e5919
```
Issues are:
1. There are many files that don't have for_packages value in "RESOURCES"
2. The detected package doesn't exist in the "for_packages" field in "RESOURCES" (i.e. the whole "RESOURCES" worksheet doesn't have `pkg:maven/org.webjars.bowergithub.datatables/dist-datatables-select@1.3.3` in the "for_packages" field)
3. From the above, other that pkg:nuget/datatables.net-select@1.3.3?uuid=4e5cdd7b-438d-46c1-83ad-15ab4a9e5919, the other "for_packages" value don't seem to make sense to me, bug?
コントリビューションガイド
評価
この issue はまだ評価されていません。