New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Generate a maven repository index file #65

Open

coffeesippa opened this issue Sep 12, 2022 · 0 comments

coffeesippa commented Sep 12, 2022

This is a feature request to generate and include a maven repository.index file (example) at the root of the https://repo.maven.apache.org/maven2/.index/ repository.

Repository index files are typically consumed by software composition analysis tools to make it easier to query repositories for packages. Libraries.io (via Tidelift) is currently misclassifying knopflerfish kf6 packages as "unknown" from http://resources.knopflerfish.org/repo/maven2/release/ because this index file is missing. This prevents us from being able to detect licenses used by knopflerfish (and that we're in compliance with terms) as well as security vulnerabilities. Here's a link to the code in libraries.io: https://github.com/librariesio/bibliothecary/blob/main/lib/bibliothecary/parsers/maven.rb

See: https://libraries.io/search?q=knopflerfish (notice Knopflerfish is missing)

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment