-
Notifications
You must be signed in to change notification settings - Fork 88
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SCIO: Detect frozen Python requirements locked with deplock #1262
Comments
mjherzog
changed the title
Detect frozen Python requirements locked with the deplock
SCIO: Detect frozen Python requirements locked with the deplock
Jun 11, 2024
pombredanne
changed the title
SCIO: Detect frozen Python requirements locked with the deplock
SCIO: Detect frozen Python requirements locked with deplock
Jun 20, 2024
There are two ways to approach this:
|
16 tasks
This is now based in pip inspect... @AyanSinhaMahapatra @TG1999 any update? |
AyanSinhaMahapatra
added a commit
to aboutcode-org/scancode-toolkit
that referenced
this issue
Jun 26, 2024
Add parser for pip-inspect.deplock files generated by deplock which has all the package metadata, i.e. the resolved versions and the dependency relationships. Reference: aboutcode-org/scancode.io#1262 Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
6 tasks
AyanSinhaMahapatra
added a commit
to aboutcode-org/scancode-toolkit
that referenced
this issue
Jun 28, 2024
Add parser for pip-inspect.deplock files generated by deplock which has all the package metadata, i.e. the resolved versions and the dependency relationships. Reference: aboutcode-org/scancode.io#1262 Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
AyanSinhaMahapatra
added a commit
to aboutcode-org/scancode-toolkit
that referenced
this issue
Jun 28, 2024
Add parser for pip-inspect.deplock files generated by deplock which has all the package metadata, i.e. the resolved versions and the dependency relationships. Reference: aboutcode-org/scancode.io#1262 Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
AyanSinhaMahapatra
added a commit
that referenced
this issue
Jul 1, 2024
Reference: #1262 Reference: #1263 Reference: #1278 Reference: #1279 Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
AyanSinhaMahapatra
added a commit
that referenced
this issue
Jul 1, 2024
Reference: #1262 Reference: #1263 Reference: #1278 Reference: #1279 Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
tdruez
pushed a commit
that referenced
this issue
Jul 2, 2024
* Bump scancode-toolkit version to v32.2.1 Signed-off-by: Ayan Sinha Mahapatra <[email protected]> * Add tests for static dependency resolution Reference: #1262 Reference: #1263 Reference: #1278 Reference: #1279 Signed-off-by: Ayan Sinha Mahapatra <[email protected]> --------- Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
To support:
... we need to detect the Python frozen requirements that will be generated. We likely want to define a conventional file name like "frozen-requirements.txt" so we can distinguish this from other standard requirements files.
This would go in the inspect package pipeline
The text was updated successfully, but these errors were encountered: