aboutcode-org / aboutcode-org/scancode.io
Improve the resolve_dependencies process by flitering out non-versioned packages and by detecting modules
オープン
- 主要言語
- Python
- スター
- 215
- フォーク
- 203
- 平均マージ
- 4日 8時間
- マージ済み PR（30日）
- 6
説明
A recent scan of jqlang/jq identified 20 dependencies. Six of these were from `Pipfile` and were identified without version number; 14 of these were from `Pipfile.lock` and were identified with specific versions. The scan failed to identify a package in the `modules` directory of the project.
The non-versioned packages are not useful and can also result in false-positive vulnerability discoveries.
The modules should be identified as dependencies.
Scan results attached.
[scancodeio_jqlang-test2.json](https://github.com/user-attachments/files/18100801/scancodeio_jqlang-test2.json)
コントリビューションガイド
評価
この issue はまだ評価されていません。