aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
https://aboutcode.org/scancode/
2.15k stars 553 forks source link

Add support to normalize versions and dependency requirements #2146

Open pombredanne opened 4 years ago

pombredanne commented 4 years ago

It would help to be able to compare and sort package versions and normalize version requirements from a package dependency (and in that later case to some mostly universal representation).

pombredanne commented 4 years ago

Some pointers:

From @jayvdb see:

pombredanne commented 4 years ago

I also have debian version supported in https://github.com/nexB/debut/blob/master/src/debut/version.py

pombredanne commented 4 years ago

See also @jayvdb and @coala https://gitlab.com/coala/package_manager

pombredanne commented 4 years ago

And of course also @AMDmi3 https://github.com/repology/libversion and its postgres buddy