siemens / continuous-clearing

The Continuous Clearing Tool scans and collects the 3rd party OSS components used in a NPM/NuGet/Debian/Maven/Python/Conan/Aipine project and uploads it to SW360 and Fossology by accepting respective project ID for license clearing.
MIT License
23 stars 9 forks source link

All the components are getting treated as Dev dependency (Poetry). #191

Open NihalBarick opened 1 month ago

NihalBarick commented 1 month ago

We have multiple Python projects which is using Poetry for dependency management. All the packages in our application are main dependencies, but when we are running the continuous clearing tool all the components are considered as dev dependencies.

We are using latest version of CA tool: 6.2.2

We are using latest version of poetry: 1.8.3

We are using latest version of python: 3.12 and also sometimes 3.11, 3.10 (Since we are having multiple python projects)

sumanthkb44 commented 3 weeks ago

Hi Nihal,

Can you share the sample Poety.lock (v1.8.3) file you're using. And also let us know how the dependencies been categorized in the pyproject.toml file for Main dependencies.