Ecosyste.ms: Timeline

Browse the timeline of events for every public repo on GitHub. Data updated hourly from GH Archive.

oss-review-toolkit/ort

github-advanced-security[bot] created a review on a pull request on oss-review-toolkit/ort

View on GitHub

fviernau created a review comment on a pull request on oss-review-toolkit/ort
I believe this topics has now been fully addressed by https://github.com/oss-review-toolkit/ort/pull/9328.

View on GitHub

fviernau created a review on a pull request on oss-review-toolkit/ort

View on GitHub

fviernau pushed 13 commits to pnpm-rewrite oss-review-toolkit/ort
  • docs(yarn): Re-align the docs with the function This is a fix-up for ad9a363. Signed-off-by: Frank Viernau <frank_v... 02192a3
  • docs(yarn): Add information about the mentioned network issue Signed-off-by: Frank Viernau <[email protected]> 0460948
  • refactor(npm): Allow `getRemotePackageDetails()` to return `null` Prepare for an upcoming change that signals that p... 771a6a5
  • refactor(yarn): Use a more speaking name for `output` This function is not suitable for parsing the JSON objects on ... 8e90a79
  • refactor(yarn): Extract `extractDataNodes()` Avoid code duplication in an upcoming change. Signed-off-by: Frank Vie... 26703f9
  • fix(yarn): Fix up the error handling in `getRemotePackageDetails()` Previously, calling `parseYarnInfo(process.stder... 41d1c6f
  • deps: update jetbrains/qodana-action action to v2024.2.5 31edf71
  • refactor(npm): Make `getRemotePackageDetails()` handle unsucessful runs This way `getRemotePackageDetails()` shouldn... 155c97e
  • refactor(npm): Remove a now unnecessary `runCatching()` All implementations of `getRemotePackageDetails()` by now re... 32ff2bb
  • refactor(npm): Move `parsePackage()` outside of the `Npm` class Prepare for re-using this function from other child ... 06f5aa5
  • refactor(npm): Move `parseProject()` out of the class Prepare for re-use in an upcoming change. Signed-off-by: Fran... d017a2c
  • refactor(node)!: Move `Pnpm` into its own dedicated package Prepare for adding further `Pnpm` specific classes. Sig... bc40a42
  • refactor(pnpm): Make `Pnpm` separate from `Npm` Stop inheriting from `Npm` and rely entirely on the output of `pnpm`... f590776

View on GitHub

fviernau pushed 10 commits to yarn-simplifcations oss-review-toolkit/ort
  • docs(yarn): Re-align the docs with the function This is a fix-up for ad9a363. Signed-off-by: Frank Viernau <frank_v... 02192a3
  • docs(yarn): Add information about the mentioned network issue Signed-off-by: Frank Viernau <[email protected]> 0460948
  • refactor(npm): Allow `getRemotePackageDetails()` to return `null` Prepare for an upcoming change that signals that p... 771a6a5
  • refactor(yarn): Use a more speaking name for `output` This function is not suitable for parsing the JSON objects on ... 8e90a79
  • refactor(yarn): Extract `extractDataNodes()` Avoid code duplication in an upcoming change. Signed-off-by: Frank Vie... 26703f9
  • fix(yarn): Fix up the error handling in `getRemotePackageDetails()` Previously, calling `parseYarnInfo(process.stder... 41d1c6f
  • deps: update jetbrains/qodana-action action to v2024.2.5 31edf71
  • refactor(npm): Make `getRemotePackageDetails()` handle unsucessful runs This way `getRemotePackageDetails()` shouldn... 155c97e
  • refactor(npm): Remove a now unnecessary `runCatching()` All implementations of `getRemotePackageDetails()` by now re... 32ff2bb
  • refactor(npm): Move `parsePackage()` outside of the `Npm` class Prepare for re-using this function from other child ... 06f5aa5

View on GitHub

fviernau pushed 74 commits to pnpm-rewrite oss-review-toolkit/ort
  • deps: update dependency ch.qos.logback:logback-classic to v1.5.10 d67369d
  • deps: Update the gradle-maven-publish-plugin to version 0.30.0 b4523c9
  • fix(maven): Correctly convert repositories When resolving artifacts using a `ProjectBuilder`, remote repositories fr... acfb440
  • test(pub): Update expected results Signed-off-by: Sebastian Schuberth <[email protected]> bb336f0
  • deps: update dependency ch.qos.logback:logback-classic to v1.5.11 b54962b
  • fix(gradle-plugin): Guard `dependencyResolutionManagement` usage Do not use that feature before it was added in Grad... 47f73b4
  • fix(pub): Properly end the input structure when parsing specs Signed-off-by: Sebastian Schuberth <sebastian@doubleop... 0d99de2
  • refactor(pub): Port the lockfile parsing to KxS Signed-off-by: Frank Viernau <[email protected]> Signed-off-by:... 831b113
  • chore(clearly-defined)!: Make `CoordinatesSerializer` internal This is only used in `Coordinates.kt` of the same mod... 4470675
  • chore: Align custom kotlinx-serializers to be objects Emphasize that there never will be multiple instances of these... 9607cd0
  • deps: update dependency io.github.pdvrieze.xmlutil:serialization to v0.90.2 06537b2
  • deps: update dependency org.cyclonedx:cyclonedx-core-java to v9.1.0 8c103c4
  • fix(spdx-utils): Accept the "no patent" exception See e.g. [1], which is marked as an exception. [1]: https://scanc... 9d0873c
  • feat(fossid): Make FossID sensitivity configurable Add the option for the user to specify the sensitivity for a Foss... e5c6e0c
  • ci(release): Increase the timeout for creating the staging repository Creating the Sonatype staging repository occas... bac154a
  • test(pub): Update expected results Signed-off-by: Sebastian Schuberth <[email protected]> 64dc2c1
  • fix(cli): Remove credentials from environment variables Do not expose any credentials, e.g. when included in proxy U... 03b4ed9
  • deps: update dependency com.github.jmongard.git-semver-plugin to v0.12.11 ed4bccf
  • chore: Align custom kotlinx-serializers to be objects, part 2 This is a follow-up to 9607cd0 for code that was merge... d743b8a
  • docs(pub): Add links to dependency types Signed-off-by: Sebastian Schuberth <[email protected]> 89f8422
  • and 54 more ...

View on GitHub

sschuberth pushed 1 commit to main oss-review-toolkit/ort
  • deps: update jetbrains/qodana-action action to v2024.2.5 31edf71

View on GitHub

sschuberth deleted a branch oss-review-toolkit/ort

renovate/jetbrains-qodana-action-2024.x

sschuberth closed a pull request on oss-review-toolkit/ort
deps: update jetbrains/qodana-action action to v2024.2.5
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [JetBrains/qodana-action](https://redirect.github.com/JetBrains/qodana-action) | action | patch | `...
sschuberth pushed 2 commits to fix-id-to-purl-conversion oss-review-toolkit/ort
  • fix(model): Correctly map `Identifier` namespaces to purl namespaces The purl specification treats everything before... 34c44d7
  • refactor(osv): Simplify queries with purls Now that purls are created correctly, simplify OSV queries by using purls... 33b2b71

View on GitHub

codecov[bot] created a comment on a pull request on oss-review-toolkit/ort
## [Codecov](https://app.codecov.io/gh/oss-review-toolkit/ort/pull/9331?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=os...

View on GitHub

sschuberth created a review on a pull request on oss-review-toolkit/ort

View on GitHub

renovate[bot] opened a pull request on oss-review-toolkit/ort
deps: update jetbrains/qodana-action action to v2024.2.5
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [JetBrains/qodana-action](https://redirect.github.com/JetBrains/qodana-action) | action | patch | `...
renovate[bot] created a branch on oss-review-toolkit/ort

renovate/jetbrains-qodana-action-2024.x - A suite of tools to automate software compliance checks.

fviernau pushed 6 commits to main oss-review-toolkit/ort
  • docs(yarn): Re-align the docs with the function This is a fix-up for ad9a363. Signed-off-by: Frank Viernau <frank_v... 02192a3
  • docs(yarn): Add information about the mentioned network issue Signed-off-by: Frank Viernau <[email protected]> 0460948
  • refactor(npm): Allow `getRemotePackageDetails()` to return `null` Prepare for an upcoming change that signals that p... 771a6a5
  • refactor(yarn): Use a more speaking name for `output` This function is not suitable for parsing the JSON objects on ... 8e90a79
  • refactor(yarn): Extract `extractDataNodes()` Avoid code duplication in an upcoming change. Signed-off-by: Frank Vie... 26703f9
  • fix(yarn): Fix up the error handling in `getRemotePackageDetails()` Previously, calling `parseYarnInfo(process.stder... 41d1c6f

View on GitHub

fviernau deleted a branch oss-review-toolkit/ort

yarn-info-parsing-fixes

fviernau closed a pull request on oss-review-toolkit/ort
Yarn info parsing fixes
See individual commits. Part of https://github.com/oss-review-toolkit/ort/issues/9261.
fviernau pushed 24 commits to yarn-simplifcations oss-review-toolkit/ort
  • refactor(model): Move `RootLicenseMatcherTest` to the correct package Signed-off-by: Sebastian Schuberth <sebastian@... 1151e95
  • refactor(model)!: Rename a class to `PathLicenseMatcher` The name `RootLicenseMatcher` was confusing as not necessar... 131c130
  • docs(model): Improve `LicenseFilePatterns` docs Add class docs and slightly reword property docs, also reducing sent... 786aba4
  • refactor(model): Make `LicenseFilePatterns` properties sets This better reflects that duplicates make no sense. Sig... 6c7a4b1
  • refactor(model)!: Rename a `LicenseFilePatterns` property `rootLicenseFilenames` sounded too much as if it would tak... d1fa585
  • chore(model)!: Remove old plugin config aliases The old names were deprecated more than a year ago, so it should be ... e4e8396
  • deps: update ksp to v2.0.21-1.0.26 d169fae
  • feat(spdx): Deal with cycles in dependency relations Circular dependency relations caused the SPDX package manager t... c9d2a49
  • docs(model): Clarify in a test what a "clean" purl is supposed to be Signed-off-by: Sebastian Schuberth <sebastian@d... 1219605
  • chore(model): Nest purl tests in preparation for adding more tests Signed-off-by: Sebastian Schuberth <sebastian@dou... d2dd061
  • chore: Align on "purl" spelling for Package URLs That seems to be the official spelling, see [1]. [1]: https://gith... 4814301
  • refactor(model): Move purl-related tests to `PurlExtensionsTest` Signed-off-by: Sebastian Schuberth <sebastian@doubl... 7f07648
  • chore(model): Remove a few redundant purl tests Qualifiers are already tested as part of provenance conversion. Sig... 2c79d17
  • fix(model): Rework purl conversion according to the specs Implement the pseudo-algorithm described at [1]. Most impo... b1740ef
  • test(model): Test against the official purl test suite data The data has been copied from [1]. [1]: https://github.... 419b42b
  • docs(yarn): Re-align the docs with the function This is a fix-up for ad9a363. Signed-off-by: Frank Viernau <frank_v... 24ffaee
  • docs(yarn): Add information about the mentioned network issue Signed-off-by: Frank Viernau <[email protected]> 65ad36f
  • refactor(npm): Allow `getRemotePackageDetails()` to return `null` Prepare for an upcoming change that signals that p... 299a471
  • refactor(yarn): Use a more speaking name for `output` This function is not suitable for parsing the JSON objects on ... 77602a2
  • refactor(yarn): Extract `extractDataNodes()` Avoid code duplication in an upcoming change. Signed-off-by: Frank Vie... 9d5c10b
  • and 4 more ...

View on GitHub

sschuberth pushed 1 commit to fix-id-to-purl-conversion oss-review-toolkit/ort

View on GitHub

sschuberth created a review on a pull request on oss-review-toolkit/ort

View on GitHub

fviernau pushed 6 commits to yarn-info-parsing-fixes oss-review-toolkit/ort
  • docs(yarn): Re-align the docs with the function This is a fix-up for ad9a363. Signed-off-by: Frank Viernau <frank_v... 24ffaee
  • docs(yarn): Add information about the mentioned network issue Signed-off-by: Frank Viernau <[email protected]> 65ad36f
  • refactor(npm): Allow `getRemotePackageDetails()` to return `null` Prepare for an upcoming change that signals that p... 299a471
  • refactor(yarn): Use a more speaking name for `output` This function is not suitable for parsing the JSON objects on ... 77602a2
  • refactor(yarn): Extract `extractDataNodes()` Avoid code duplication in an upcoming change. Signed-off-by: Frank Vie... 9d5c10b
  • fix(yarn): Fix up the error handling in `getRemotePackageDetails()` Previously, calling `parseYarnInfo(process.stder... f6f9054

View on GitHub

codecov[bot] created a comment on a pull request on oss-review-toolkit/ort
## [Codecov](https://app.codecov.io/gh/oss-review-toolkit/ort/pull/9330?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=os...

View on GitHub

sschuberth opened a draft pull request on oss-review-toolkit/ort
Fix `Identifier` to purl conversion
Please have a look at the individual commit messages for the details.
sschuberth created a branch on oss-review-toolkit/ort

fix-id-to-purl-conversion - A suite of tools to automate software compliance checks.

sschuberth created a review comment on a pull request on oss-review-toolkit/ort
Yes, makes sense to me.

View on GitHub

sschuberth created a review on a pull request on oss-review-toolkit/ort

View on GitHub

fviernau pushed 1 commit to yarn-info-parsing-fixes oss-review-toolkit/ort
  • fix(yarn): Fix up the error handling in `getRemotePackageDetails()` Previously, calling `parseYarnInfo(process.stder... 5f0b70d

View on GitHub

fviernau pushed 5 commits to yarn-info-parsing-fixes oss-review-toolkit/ort
  • docs(yarn): Add information about the mentioned network issue Signed-off-by: Frank Viernau <[email protected]> a8690fe
  • refactor(npm): Allow `getRemotePackageDetails()` to return `null` Prepare for an upcoming change that signals that p... 35d4f3b
  • refactor(yarn): Use a more speaking name for `output` This function is not suitable for parsing the JSON objects on ... bf58896
  • refactor(yarn): Extract `extractDataNodes()` Avoid code duplication in an upcoming change. Signed-off-by: Frank Vie... f3889be
  • fix(yarn): Fix up the error handling in `getRemotePackageDetails()` Previously, calling `parseYarnInfo(process.stder... 58af405

View on GitHub

fviernau created a review comment on a pull request on oss-review-toolkit/ort
As ORT's execution still is "successful" (you can rely on the result), I would propose to log the errors as "warnings". (And then in a following change log warnings either as info or debug). Wou...

View on GitHub

sschuberth created a review comment on a pull request on oss-review-toolkit/ort
Also, as these are errors on the Yarn side, should be log to error level, too? This would even make more sense when also parsing for warnings explicitly in a follow-up commit, as these would then b...

View on GitHub

Load more