-
Notifications
You must be signed in to change notification settings - Fork 29
Open
Description
Right now only the compile, runtime, and test scopes are used. Maven only has a total of 6 scopes. It's a shame the code only supports half of them...
spdx-maven-plugin/src/main/java/org/spdx/maven/utils/SpdxV3DependencyBuilder.java
Lines 136 to 158 in 539c533
| private RelationshipType scopeToRelationshipType( String scope, boolean optional ) | |
| { | |
| if ( scope == null ) | |
| { | |
| return RelationshipType.OTHER; | |
| } | |
| else if ( optional ) | |
| { | |
| return RelationshipType.HAS_OPTIONAL_COMPONENT; | |
| } | |
| else if ( scope.equals( "compile" ) || scope.equals( "runtime" ) ) | |
| { | |
| return RelationshipType.HAS_DYNAMIC_LINK; | |
| } | |
| else if ( scope.equals( "test" ) ) | |
| { | |
| return RelationshipType.DEPENDS_ON; | |
| } | |
| else | |
| { | |
| return RelationshipType.OTHER; | |
| } | |
| } |
Please consider adding:
- provided -> hasProvidedDependency / PROVIDED_DEPENDENCY_OF
- system -> hasStaticLink / STATIC_LINK
- import -> this is used for bom (dependency) version enforcing ...
Also javax and jakarta api depdendencies are specifications... hasSpecification?
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels