Philippe Ombredanne

Note that only alternative today would be to resort to extensive pseudo-random screen scraping of https://pkg.go.dev/search laced in with some extensive recursive hitting of https://index.golang.org/index to get a complete package...

@jba this is responding but not doing anything for me: ``` $ wget https://api.godoc.org/packages --2022-02-01 14:33:56-- https://api.godoc.org/packages Resolving api.godoc.org (api.godoc.org)... 142.250.179.147, 2a00:1450:400e:80f::2013 Connecting to api.godoc.org (api.godoc.org)|142.250.179.147|:443... connected. HTTP request sent,...

@jba strike this out. It completed after a while! Thank you ++ :bow:

@c3d Thanks ++ Let me get a stab at this on a rainy day :P

> Our current motivation is focused more on producing an SBOM than licensing, but it's good to know SPDX has that covered too Slightly off-topic, FWIW, if your focus is...

> Some don't have a pom.xml embedded in them so I wasn't sure how to get the group part of the PURL for those, but I would like to once...

There is something in your changes that make the tests fail... I do not think you can just use multiple cached directories. You should use a single cache and then...

@KevinJi22 let me review all this in details.... a couple comments: 1. the DCO check is failing... there is likely a commit to amend 2. for the tests, I suggest...

Actually `--external-license-directory` would be better for consistency as we never use an underscore in a command line option. Note that Click will translate this to an undescore-separated Python variable name...

@TejaPutcha Excelllent research!... one hint for you: I see that the opendev website is based on Gitea. And Gitea's own demo site also uses the same style of license file...