Comments (3)
Thanks @noqcks for filing this issue! I've just looked into it and it's a bug on our part. For NuGet, we get the repository from the nuspec file's Repository
tag but it wasn't being propagated properly through to our user-facing services. Both of the package versions that you mentioned have this tag populated. From my knowledge, we don't use the project URL to populate the repository in deps.dev, we only use the Repository
tag.
<repository type="git" url="https://github.com/dotnet/aspnetcore" commit="5a4c82ec57fadddef9ce841d608de5c7c8c74446"/>
and for https://api.nuget.org/v3-flatcontainer/azure.core/1.34.0/azure.core.nuspec.
<repository type="git" url="https://github.com/Azure/azure-sdk-for-net" commit="616f600f67a2494d9d046daa79d4d470d1b52284"/>
Also, @benmss, on my end, I see a Source Repository link for Azure.Core on nuget.org under the About section. If you've noticed anything odd on deps.dev please don't hesitate to file an issue, we appreciate the feedback.
I've submitted a fix for this but it will take a while for it to propagate through our system. I will report back here when that is done.
from deps.dev.
I think the problem lies in how the nuget.org
reports URLs in the meta data it provides for packages. Examining the meta data retrieved for azure.core
, there is a URL for the "Project website" as listed on the package page, but no URL for the "Source repository".
Taking another package, nuget.server.core
, both "Project website" and "Source repostiory" are the same, which means the included URL in the meta data happens to be correct: https://github.com/NuGet/NuGet.Server, but is also absent in deps.dev as a repository link.
For context, we have a repository finding feature in our project: Macaron. Currently it is fine-tuned for Java packages. We are considering use of deps.dev for other ecosystems, but there are some problems -- like this one.
from deps.dev.
This has been fixed. Please let us know if you find any other inconsistencies. Thanks for the report.
from deps.dev.
Related Issues (20)
- how to get the checksum information or some type of hash value of the package through the API HOT 1
- Unresolved dependency tree in go HOT 1
- The maven component query return data is missing the publishedAt field. HOT 1
- license ids do not always correspond to the official SPDX list HOT 2
- Commercial use of deps.dev HOT 1
- Compatibility v3 - v3alpha HOT 2
- Missing version for Go package github.com/cncf/xds/go
- Missing Go package github.com/docker/cli HOT 1
- Missing version for Go package github.com/opencontainers/image-spec
- Support Go standard library package
- Missing version for Go package github.com/asaskevich/govalidator
- Frequent missing publishedAt element for versions where default = true HOT 1
- Python (PyPi) version numbers padded with '.0' HOT 2
- REST API similarlyNamedPackages returns no results HOT 2
- How to choose the default version of a package HOT 1
- Surface deprecation warnings that appear in the UI HOT 2
- PurlLookup does not work for Go module names containing uppercase letters HOT 7
- Support PEP 639 for PyPI licenses HOT 2
- Add dependent counts to the API HOT 7
- purlLookupBatch Fails Entire Batch If Any Repo Is Missing HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from deps.dev.