dash-licenses icon indicating copy to clipboard operation
dash-licenses copied to clipboard

Golang ID parser misparses golang "native" libraries

Open waynebeaton opened this issue 3 years ago • 0 comments

The following line from a go.sum file:

golang.org/x/sys v0.0.0-20220406163625-3f8b81556e12 h1:QyVthZKMsyaQwBTJE04jdNN0Pp5Fn9Qga0mrgxyERQM=

Is currently transformed into:

go/golang/golang.org%2Fx/sys/v0.0.0-20220406163625-3f8b81556e12

It should be:

go/golang/x/sys/3f8b81556e12

This then maps to source found at a specific commit in GitHub:

https://github.com/golang/sys/archive/3f8b81556e12aefb24de6d626ad5b2c1f7253818.zip

I'm not quite sure at this point how to map the abridged commit id, 3f8b81556e12 to the full id, 3f8b81556e12aefb24de6d626ad5b2c1f7253818. There may be an API that we can leverage...

Update:

The URL https://github.com/golang/sys/archive/3f8b81556e12.zip redirects to the right place. Finding source should be relatively easy.

waynebeaton avatar Sep 23 '22 03:09 waynebeaton