Open coffeesippa opened 2 years ago
This is a feature request to generate and include a maven repository.index file (example) at the root of the https://repo.maven.apache.org/maven2/.index/ repository.
.index
Repository index files are typically consumed by software composition analysis tools to make it easier to query repositories for packages. Libraries.io (via Tidelift) is currently misclassifying knopflerfish kf6 packages as "unknown" from http://resources.knopflerfish.org/repo/maven2/release/ because this index file is missing. This prevents us from being able to detect licenses used by knopflerfish (and that we're in compliance with terms) as well as security vulnerabilities. Here's a link to the code in libraries.io: https://github.com/librariesio/bibliothecary/blob/main/lib/bibliothecary/parsers/maven.rb
See: https://libraries.io/search?q=knopflerfish (notice Knopflerfish is missing)
This is a feature request to generate and include a maven repository
.indexfile (example) at the root of the https://repo.maven.apache.org/maven2/.index/ repository.Repository index files are typically consumed by software composition analysis tools to make it easier to query repositories for packages. Libraries.io (via Tidelift) is currently misclassifying knopflerfish kf6 packages as "unknown" from http://resources.knopflerfish.org/repo/maven2/release/ because this index file is missing. This prevents us from being able to detect licenses used by knopflerfish (and that we're in compliance with terms) as well as security vulnerabilities. Here's a link to the code in libraries.io: https://github.com/librariesio/bibliothecary/blob/main/lib/bibliothecary/parsers/maven.rb
See: https://libraries.io/search?q=knopflerfish (notice Knopflerfish is missing)