mirror of
https://github.com/anchore/syft.git
synced 2025-11-18 00:43:20 +01:00
41 lines
1.7 KiB
Go
41 lines
1.7 KiB
Go
/*
|
|
Package pkg provides the data structures for a package, a package catalog, package types, and domain-specific metadata.
|
|
*/
|
|
package pkg
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/anchore/syft/syft/source"
|
|
)
|
|
|
|
// ID represents a unique value for each package added to a package catalog.
|
|
type ID int64
|
|
|
|
// Package represents an application or library that has been bundled into a distributable format.
|
|
type Package struct {
|
|
id ID // uniquely identifies a package, set by the cataloger
|
|
Name string // the package name
|
|
Version string // the version of the package
|
|
FoundBy string // the specific cataloger that discovered this package
|
|
Locations []source.Location // the locations that lead to the discovery of this package (note: this is not necessarily the locations that make up this package)
|
|
// TODO: should we move licenses into metadata?
|
|
Licenses []string // licenses discovered with the package metadata
|
|
Language Language // the language ecosystem this package belongs to (e.g. JavaScript, Python, etc)
|
|
Type Type // the package type (e.g. Npm, Yarn, Python, Rpm, Deb, etc)
|
|
CPEs []CPE // all possible Common Platform Enumerators
|
|
PURL string // the Package URL (see https://github.com/package-url/purl-spec)
|
|
MetadataType MetadataType // the shape of the additional data in the "metadata" field
|
|
Metadata interface{} // additional data found while parsing the package source
|
|
}
|
|
|
|
// ID returns the package ID, which is unique relative to a package catalog.
|
|
func (p Package) ID() ID {
|
|
return p.id
|
|
}
|
|
|
|
// Stringer to represent a package.
|
|
func (p Package) String() string {
|
|
return fmt.Sprintf("Pkg(type=%s, name=%s, version=%s)", p.Type, p.Name, p.Version)
|
|
}
|