aboutcode-org / aboutcode-org/vulnerablecode
Remove redundant package-urls from VCIO
未关闭
- 主要语言
- Python
- 星标
- 702
- 派生
- 328
- 平均合并
- 3 天 8 小时
- 30 天内合并 PR
- 3
描述
Currently, we store duplicated package-urls because of the way they are different structurally but similar when constructed as a purl whole, for example:
1st Scenario:
Purl A-
type-"pypi", namespace- "", name - "foo/bar"
Purl B-
type-"pypi", namespace-"foo", name - "bar"
They are structurally different, but their purl will be identical i.e "pkg:pypi/foo/bar"
2nd Scenario:
https://github.com/nexB/vulnerablecode/wiki/WeeklyMeetings#meeting-on-tuesday-2023-10-24-at-1600-utc discussed here in the weekly meeting
The solution for 2nd scenario was discussed in the weekly meeting, but what should be done for 1st scenario ?
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。