aboutcode-org / aboutcode-org/scancode.io

Scan results quality for Python packages: wheel vs. source distributions

Open
#512 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

While the "License clarity" and "Scan summary" data looks great when using source distributions, the quality of the results when using wheel as inputs could be improved.

For example with https://pypi.org/project/XlsxWriter/3.0.3/#files

- Source: `XlsxWriter-3.0.3.tar.gz`

![Screenshot 2022-08-29 at 16 48 08](https://user-images.githubusercontent.com/489057/187204734-07b36800-e2b8-43b3-b822-bed91ceab6e0.jpg)

- Wheel: `XlsxWriter-3.0.3-py3-none-any.whl `

![Screenshot 2022-08-29 at 16 48 19](https://user-images.githubusercontent.com/489057/187204745-59af819a-7408-4481-b7ae-52fa0a59a160.jpg)

----

When looking at the `LICENSE.txt` and `METADATA` key files of the wheel, it seems that we should be able to get the `Declared license` and `Declared holder` value as we do for the source dist:

![Screenshot 2022-08-29 at 16 51 28](https://user-images.githubusercontent.com/489057/187205747-a26bfa7c-1cfa-4527-a8f2-6cb90fa5fa88.jpg)
![Screenshot 2022-08-29 at 16 52 55](https://user-images.githubusercontent.com/489057/187205758-d181ced0-27ad-4dfc-9422-7d4cc129aa55.jpg)
![Screenshot 2022-08-29 at 16 53 05](https://user-images.githubusercontent.com/489057/187205766-6e2438cd-63a5-45e4-adbc-6237e5884de2.jpg)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.