-
Notifications
You must be signed in to change notification settings - Fork 508
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
🌱 Add ProjectPackageClient interface and deps.dev default client #3954
Conversation
Signed-off-by: Raghav Kaul <[email protected]>
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #3954 +/- ##
==========================================
- Coverage 73.83% 66.04% -7.80%
==========================================
Files 219 226 +7
Lines 15987 16290 +303
==========================================
- Hits 11804 10758 -1046
- Misses 3430 4856 +1426
+ Partials 753 676 -77 |
This pull request has been marked stale because it has been open for 10 days with no activity |
This pull request has been marked stale because it has been open for 10 days with no activity |
Signed-off-by: Raghav Kaul <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we throw everything under an internal
folder while experimenting, so we can change things later without breaking changes?
maybe internal/clients
or internal/clients/depsdev
? We do this already with nuget client for example, which is marked as internal in cmd/internal/nuget
Signed-off-by: Raghav Kaul <[email protected]>
Signed-off-by: Raghav Kaul <[email protected]>
Signed-off-by: Raghav Kaul <[email protected]>
What kind of change does this PR introduce?
This change adds a new client that allows Scorecard to retrieve package versions for a repository. A
ProjectPackageVersion.Version
is a package version published by a repository.Instead of looking up a repository directly in a package manager, this interface allows Scorecard to handle multiple project package versions, i.e. packages with different names than their source repos, and monorepos that publish multiple packages.
We implement a deps.dev client for this interface using GetProjectPackageVersions: