ossa-scanner 0.1.14__tar.gz → 0.1.16__tar.gz

{ossa_scanner-0.1.14 → ossa_scanner-0.1.16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: ossa_scanner
-Version: 0.1.14
+Version: 0.1.16
 Summary: Open Source Software Advisory generator for Core and Base Linux Packages.
 Home-page: https://github.com/oscarvalenzuelab/ossa_scanner
 Author: Oscar Valenzuela

ossa_scanner-0.1.16/ossa_scanner/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.16"

{ossa_scanner-0.1.14 → ossa_scanner-0.1.16}/ossa_scanner/utils/package_manager.py

@@ -138,10 +138,10 @@ def parse_apt_info(output, package_name):
             info["website"] = line.split(":", 1)[1].strip()
         elif "Copyright" in line:
             info["references"] = line.strip()
-        info["licenses"] = extract_spdx_ids(info["licenses"])
-        severity = license_classificaton(info["licenses"])
 
-    license = apt_get_license_from_source(package_name)
+    info["licenses"] = apt_get_license_from_source(package_name)
+    info["licenses"] = extract_spdx_ids(info["licenses"])
+    severity = license_classificaton(info["licenses"])
 
     # Ensure all keys are present even if data is missing
     return {
@@ -153,18 +153,22 @@ def parse_apt_info(output, package_name):
 
 def apt_get_license_from_source(package_name):
     try:
+        print('downloading source for:', package_name)
         subprocess.run(["apt-get", "source", package_name], check=True, capture_output=True, text=True)
         source_dirs = [d for d in os.listdir() if d.startswith(package_name) and os.path.isdir(d)]
+        print('source_dirs for:', source_dirs)
         if not source_dirs:
             return "NOASSERTION"
         package_dir = source_dirs[0]
         copyright_file = os.path.join(package_dir, "debian", "copyright")
+        print('copyright_file:', copyright_file)
         licenses = []
         if os.path.exists(copyright_file):
             with open(copyright_file, "r", encoding="utf-8") as f:
                 for line in f:
                     if re.search(r"(?i)license:", line):
                         licenses.append(line.split(":", 1)[1].strip())
+        print('licenses:', licenses)
         shutil.rmtree(package_dir, ignore_errors=True)
         return ", ".join(set(licenses)) if licenses else "NOASSERTION"
     except subprocess.CalledProcessError as e:

{ossa_scanner-0.1.14 → ossa_scanner-0.1.16}/ossa_scanner.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: ossa_scanner
-Version: 0.1.14
+Version: 0.1.16
 Summary: Open Source Software Advisory generator for Core and Base Linux Packages.
 Home-page: https://github.com/oscarvalenzuelab/ossa_scanner
 Author: Oscar Valenzuela

ossa_scanner-0.1.14/ossa_scanner/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.1.14"