meta-dependencytrack
meta-dependencytrack copied to clipboard
Normalize names for related packages
Currently we emit package with duplicate names such as:
{
"name": "foo:a foo:b foo:c",
"version": "7.78.0",
"cpe": "cpe:2.3:a:foo:a:7.78.0:*:*:*:*:*:*:*"
},
{
"name": "foo:a foo:b foo:c",
"version": "7.78.0",
"cpe": "cpe:2.3:a:foo:b:7.78.0:*:*:*:*:*:*:*"
},
{
"name": "foo:a foo:b foo:c",
"version": "7.78.0",
"cpe": "cpe:2.3:a:foo:c:7.78.0:*:*:*:*:*:*:*"
},
These should have three distinct names:
{
"name": "foo:a",
"version": "7.78.0",
"cpe": "cpe:2.3:a:foo:a:7.78.0:*:*:*:*:*:*:*"
},
{
"name": "foo:b",
"version": "7.78.0",
"cpe": "cpe:2.3:a:foo:b:7.78.0:*:*:*:*:*:*:*"
},
{
"name": "foo:c",
"version": "7.78.0",
"cpe": "cpe:2.3:a:foo:c:7.78.0:*:*:*:*:*:*:*"
},