aboutcode-org / aboutcode-org/scancode.io

Restructure `inspect_packages` pipeline

未關閉
#1,419 0 則留言 0 個 reaction 已指派 1 人 已被 @AyanSinhaMahapatra 認領 在 GitHub 檢視
high priority
主要語言
Python
星號
215
分支
203
平均合併
4 天 8 小時
30 天內合併 PR
6

描述

There are two conflicting use cases that needs to be addressed:

1. Running a fast package scan to only get package information from manifests and lockfiles
2. Running a more detailed package scan with package assembly and resolving dependencies (but still faster as this is a package-only scan without license/copyrights)

2 was needed for https://github.com/aboutcode-org/scancode.io/pull/1244 and is what we have now with package assembly and resolving dependencies through the `StaticResolver` group, but note that we have the same functionality with the `ResolveDependencies` pipeline, so it be better perhaps to:

* Have the `inspect_packages` pipeline only do 1.
* Have the `resolve_dependencies` pipeline do 2.

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。