oracle / oracle/macaron

[Enhancement Request] - [Build specs overwriting and path sanitization overlaps due to incomplete purl/version handling]

Open
#1,307 0 comments 0 reactions 1 assignee View on GitHub

@nicallen is already working on this.

Since Feb 23, 2026.

build_spec_generation enhancement
Dominant language
Python
Stars
210
Forks
36
Avg merge
1d 10h
Merged PRs (30d)
2

Description

Description

Currently, build specs are stored and retrieved partly based on the purl of the artifact but without the version component. As a result, running Macaron on different versions of the same artifact causes new results to overwrite previous results.

Additionally, the output path for build specs normalizes all special characters to underscores (_). This may cause path overlaps in cases where different meaningful characters are present in the artifact name, such as periods (.). For example, both foo.bar and foo_bar would map to foo_bar, causing collisions. The file naming strategy should preserve certain valid characters (such as .) and only sanitize those strictly necessary for file system safety, to avoid these issues.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.