Repository navigation
Use git-pkgs/enrichment for the enrichment API - #588
Merged
Merged
Conversation
internal/enrichment now adapts the shared module instead of calling registries and OSV itself. License categories in the API and the web UI come from enrichment.CategorizeLicense, which normalizes the license first. Vulnerability fixed versions come from the affected range of the queried package.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #562.
internal/enrichmentis now a thin adapter overgithub.com/git-pkgs/enrichment. It builds PURLs from the proxy's ecosystem names, normalizes licenses for display and reports retracted versions as yanked. The API response shapes are unchanged.EnrichPackage,GetLatestVersionvia registriesRegistriesClient.GetPackage(git-pkgs/enrichment#86)EnrichVersionRegistriesClient.GetVersionBulkEnrichPackagesRegistriesClient.BulkLookupCheckVulnerabilitiesvia OSVVulnerabilityClient.CheckService.IsOutdated,Service.CategorizeLicenseenrichment.IsOutdated,enrichment.CategorizeLicenseChanges in behaviour:
mit,Apache 2.0andGPLv3are categorized instead of falling through to unknown.registries.ErrNotFoundmaps to nil).go.mod points at a pseudo-version of enrichment main until #86 is in a release. I'll switch it to the tag then.