Repository navigation
Support additional dependency resolution inputs beyond requirements #12
Description
ScanCode support most if not all Python package metadata formats. We should add support for these.
One design could be to include the parsing from SCTK directly here like we did for requirements. Alternative designs could be to accept an SCTK scan as an input or a list of Package URLs + vers or a list of "dependencies" as reported by SCTK .
- Support wheels and sdists as an input for dependency resolution
- Support setup.py/setup.cfg as an input for dependency resolution
- Support Pipfile and Pipfile.lock as an input for dependency resolution
- Support poetry pyproject.toml as an input for dependency resolution and its lock files
Reacted by Sebastian Schuberth and Martin Nonnenmacher
Activity
heliocastro commentedon Sep 29, 2023
pyproject.toml in not anymore poetry exclusive, but is official Python PEP:
https://peps.python.org/pep-0621/
Suggestion is not look for the pyproject, but direct for lock files which is now properly generated by Poetry, PDM, Hatch, etc..