Function get_ambiguous_package_detections

src/summarycode/todo.py:171–214

(codebase)

def get_ambiguous_package_detections(codebase):
    codebase_packages = codebase.attributes.packages
    codebase_dependencies = codebase.attributes.dependencies
    
    codebase_packages_purls = [
        package["purl"]
        for package in codebase_packages
    ]
    deps_datafile_paths = set()
    deps_datafile_paths.update([
        dep["datafile_path"]
        for dep in codebase_dependencies
    ])

    ambi_package_detections = []

    for resource in codebase.walk():
        package_data = getattr(resource, 'package_data', []) or []
        for package in package_data:
            detection_type = None

            # Top-level packages are not created for private packages so
            # these should not be consider for package detection issues
            is_private = package.get("is_private", False)
            if is_private:
                continue

            if not package["purl"]:
                if resource.path not in deps_datafile_paths and not resource.for_packages:
                    detection_type=PackageDetectionCategory.CANNOT_CREATE_PURL.value
            else:
                if package["purl"] not in codebase_packages_purls:
                    detection_type=PackageDetectionCategory.CANNOT_CREATE_TOP_LEVEL_PACKAGE.value
            
            if detection_type:
                ambi_package_detections.append(
                    AmbiguousDetection.from_package(
                        package_data=package,
                        detection_log=[detection_type],
                        file_path=resource.path,
                    )
                )

    return ambi_package_detections


def populate_resources_for_reviews(codebase, ambiguous_detections):