ossa-scanner 0.1.24__tar.gz → 0.1.26__tar.gz

{ossa_scanner-0.1.24 → ossa_scanner-0.1.26}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: ossa_scanner
-Version: 0.1.24
+Version: 0.1.26
 Summary: Open Source Software Advisory generator for Core and Base Linux Packages.
 Home-page: https://github.com/oscarvalenzuelab/ossa_scanner
 Author: Oscar Valenzuela

ossa_scanner-0.1.26/ossa_scanner/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.26"

{ossa_scanner-0.1.24 → ossa_scanner-0.1.26}/ossa_scanner/utils/downloader.py

@@ -21,13 +21,13 @@ def download_source(package_manager, package_name, output_dir):
         if package_manager == 'apt':
             cmd = ['apt-get', 'source', package_name, '-d', output_dir]
             print("CMD:", cmd)
-            exit()
             subprocess.run(cmd, check=True)
             source_dirs = [d for d in os.listdir() if d.startswith(package_name) and os.path.isdir(d)]
             print('source_dirs:', source_dirs)
             if not source_dirs:
                 print(f"Source package for {package_name} not found in {package_name}.")
                 return
+            exit()
         elif package_manager in ['yum', 'dnf']:
             p_hash = hash(package_name) % 10000
             output_dir = os.path.join(output_dir, str(p_hash))

{ossa_scanner-0.1.24 → ossa_scanner-0.1.26}/ossa_scanner/utils/package_manager.py

@@ -132,7 +132,6 @@ def parse_yum_info(output):
 def parse_apt_info(output, package_name):
     info = {}
     lines = output.splitlines()
-    print(package_name, lines)
     for line in lines:
         if line.startswith("Homepage:"):
             info["website"] = line.split(":", 1)[1].strip()
@@ -143,19 +142,20 @@ def parse_apt_info(output, package_name):
 
     if not info["licenses"]:
         print('not found licenses')
-        info["licenses"] = apt_get_license_from_source(package_name)
+        #info["licenses"] = apt_get_license_from_source(package_name)
 
-    if info["licenses"]:
-        info["licenses"] = extract_spdx_ids(info["licenses"])
-        severity = license_classificaton(info["licenses"])
-    else:
-        severity = "Informational"
+    # if info["licenses"]:
+    #    info["licenses"] = extract_spdx_ids(info["licenses"])
+    #    severity = license_classificaton(info["licenses"])
+    # else:
+        
+    severity = "Informational"
 
     print(package_name, info)
 
     # Ensure all keys are present even if data is missing
     return {
-        "licenses": info["licenses"],
+        "licenses": info.get("licenses", "NOASSERTION"),
         "copyright": info.get("copyright", "NOASSERTION"),
         "references": info.get("references", "NOASSERTION"),
         "severity": severity,

{ossa_scanner-0.1.24 → ossa_scanner-0.1.26}/ossa_scanner.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: ossa_scanner
-Version: 0.1.24
+Version: 0.1.26
 Summary: Open Source Software Advisory generator for Core and Base Linux Packages.
 Home-page: https://github.com/oscarvalenzuelab/ossa_scanner
 Author: Oscar Valenzuela

ossa_scanner-0.1.24/ossa_scanner/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.1.24"