dejacode
dejacode copied to clipboard
aboutcode-org
Automate open source license compliance and ensure software supply chain integrity
The working idea here is to come up with the best way to identify cross-package relationships, especially to be able to get to (1) the source code and (2) more...
**Note: the scope and details of this issue have changed since this original posting. See new comments below for more details.** See related issue https://github.com/nexB/scancode-toolkit/issues/2897 We should assign a category+usage-policy...
Perhaps this is a user "pilot" error, but when I create a Package in DejaCode from a SourceForge download URL, I get strange results. A recent Add Package using https://sourceforge.net/projects/scribus/files/scribus/1.6.0/scribus-1.6.0.tar.gz/download...
From https://github.com/nexB/dejacode/issues/26#issuecomment-1879020960 > one other observation, which is not directly related to this issue, but something that is somewhat perplexing. DejaCode found the existing scans that I created yesterday for...
To get more value out of our VulnerableCodeDB integration, it would be great if we could add a "has_vulnerability" property to both the Package model and the Component model to...
We need to add add pagination on the Product Inventory tab, since the number of Inventory Items can easily be well over 100. Also, we need to fix the default...
When adding a Package to DejaCode from a Download URL scan, it would be very useful for the package authors to be populated automatically. See also: - https://github.com/nexB/scancode-toolkit/issues/3389 - https://github.com/nexB/scancode.io/issues/719
When adding new packages to DejaCode, there are often several URLs for the same package (for instance when adding PyPI packages there can be multiple wheels and sdist for the...
Introduce VEX Import (VEX Ingest) capability to DejaCode Refer to #15 for background details, especially the suggested improvements to the DejaCode Product and Product Package models. The initial challenge is...
Metadata
Owner
Metadata
Automate open source license compliance and ensure software supply chain integrity