scancode.io

scancode.io copied to clipboard

Improve presentation of the project details section: "Resources detected license expressions"

1

On the project details page, I would like an improved presentation of the "Resources detected license expressions" section: - Rename this to something shorter like "Top Detected licenses in files"...

pombredanne

I think that a possible reason is that all project details and counts are recomputed ... Mya be some caching would help?

pombredanne

Design data structure structure to store "TODO" items for review

1

We need to be able to store TODO/review items (may be the same way we can store compliance alerts?) The toolkit side has this for a start https://github.com/nexB/scancode-toolkit/issues/3122 This is...

pombredanne

When a project message is related to a resource path or package, I want to link to these. - If there is a path, I would like to have a...

pombredanne

In the D2D pipeline, when we match a Resource or Directory against purldb, we return all packages that match to the Resource or Directory. This process should be improved upon,...

JonoYang

Add LAYERS sheet to XLSX output for Docker scans uploaded to SCIO

10

It would be nice to get the LAYERS sheet in the XLSX output for a Docker scan added to the SCIO database with a load_inventory pipeline.

mjherzog

Define what is a conclusive "To-From" mapping in the develop_to_deploy pipeline

1

When we have a single path mapped this is a weak mapping. We will need to further classify each To-From relationship quality. A relationship could be further analyzed based: -...

pombredanne

When working with a large number of Scan projects it is painful to navigate on the Projects screen because the only page navigation is at the bottom. It would be...

mjherzog

In all the following pipelines: * rootfs * docker * docker-windows * scan_codebase when we scan files for license, copyright and others, we are [skipping the scan](https://github.com/nexB/scancode.io/blob/main/scanpipe/pipes/scancode.py#L360) for codebase resources...

AyanSinhaMahapatra

We should be able to: - [ ] Resolve locked npm dependencies from yarn and npm lockfiles - [ ] Generate lockfiles for npm and yarn if they are missing...

pombredanne