aboutcode-org / aboutcode-org/vulnerablecode

Suggestion: use "Vcs-*" information from Debian's Sources.gz

Open
#649 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

Debian stores information about the version control system of a package. This might be useful information to store and return whenever possible. Example information from Debian:

```
Package: ed
Binary: ed
Version: 1.17-1
Maintainer: xxxx
Uploaders: xxxx
Build-Depends: debhelper-compat (= 13)
Architecture: any
Standards-Version: 4.5.1
Format: 3.0 (quilt)
Files:
9be19876c935f5192681329b70d0f635 1818 ed_1.17-1.dsc
ec44da3c77341543fe15902540f132fb 90863 ed_1.17.orig.tar.gz
e009ba526e1a6c6d8d5e2fc8ee887c87 8464 ed_1.17-1.debian.tar.xz
Vcs-Browser: https://salsa.debian.org/debian/ed
Vcs-Git: https://salsa.debian.org/debian/ed.git
Checksums-Sha256:
05e781f628a47e71e25851dbd252a884b58f70226f0657b4b1b575a52bcc1e8d 1818 ed_1.17-1.dsc
6c84ce06fea002fe76f19bf66c3807edafd898b8ab0f15852e1497d48f44d96d 90863 ed_1.17.orig.tar.gz
8cc3b3c1bfb139d8ac635d4fefa47f2aa289d007fcd1da553bad97ce26fe7f88 8464 ed_1.17-1.debian.tar.xz
Homepage: https://www.gnu.org/software/ed/
Package-List:
ed deb editors optional arch=any
Testsuite: autopkgtest
Directory: pool/main/e/ed
Priority: source
Section: editors
```

The interesting field is `Vcs-Git`. Possibly `Homepage` could also be interesting. These could optionally be used to cross correlate information from other distributions and aggregate information.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.