aboutcode-org / aboutcode-org/scancode.io
Definitions for `DiscoveredPackage` and `DiscoverdDependency` are very different
- Ngôn ngữ chính
- Python
- Star
- 215
- Fork
- 203
- Merge trung bình
- 4 ngày 8 giờ
- Pull request đã merge (30 ngày)
- 6
Mô tả
Minor nitpick:
`DiscoveredPackage` used `uuid` field
https://github.com/nexB/scancode.io/blob/5f2cbae33c1ac7fa843fb4bddf9ab3f62fc831b2/scanpipe/models.py#L2534-L2536
`DiscoveredDependency` uses a `CharField`
https://github.com/nexB/scancode.io/blob/5f2cbae33c1ac7fa843fb4bddf9ab3f62fc831b2/scanpipe/models.py#L2837-L2840
---
We need to discuss the distinction between a `Package` and a `Dependency`.
1. When is a dependency not a package ?
2. All all packages dependency of the project being scanned currently
3. CycloneDX schema's [dependencies](https://cyclonedx.org/docs/1.5/json/#dependencies) are only a mapping from a component to a component, should we opt for a similar approach ?
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.