From 7e330cdff8fe39eac1bf1730e6dfcda8620caa27 Mon Sep 17 00:00:00 2001
From: Alex Goodman <wagoodman@users.noreply.github.com>
Date: Fri, 14 Nov 2025 23:42:39 -0500
Subject: [PATCH] correct poetry lock integrity hash claim

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
---
 internal/capabilities/packages.yaml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/internal/capabilities/packages.yaml b/internal/capabilities/packages.yaml
index 76a18dc24..029ed42a7 100644
--- a/internal/capabilities/packages.yaml
+++ b/internal/capabilities/packages.yaml
@@ -3001,8 +3001,7 @@ catalogers:
           - name: license
             default: true
           - name: dependency.depth
-            default:
-              - direct
+            default: []
           - name: dependency.edges
             default: ""
           - name: dependency.kinds
@@ -3622,10 +3621,9 @@ catalogers:
             default: false
           - name: package_manager.files.digests
             default: false
+          # TODO: we can enhance this to track file hashes from the poetry.lock file
           - name: package_manager.package_integrity_hash
-            default: true
-            evidence:
-              - PythonPoetryLockEntry.PackageHashes
+            default: false
       - function: parseRequirementsTxt
         detector: # AUTO-GENERATED
           method: glob # AUTO-GENERATED