links to git tags and links to source packages
Closed this issue · 7 comments
Report the cases where we can find Git tags or Git commits corresponding to releases. If such tags or commits exist we can add the GitHub compare url in the json file. Following format can be used for that.
{“others”:{“compare_link”: “XXXXX”}
per @andre15silva's suggestion, we can also collect the link to the source package on Central:
{
"others":{
"compare_link”: “XXXXX”,
"maven_source_link": “http://XXXXX/source.zip”,
}
}
one number we'd like is the percentage of Maven dependency versions for which we are able to identify a Github tag with reasonable effort.
This is fixed with #73.
one number we'd like is the percentage of Maven dependency versions for which we are able to identify a Github tag with reasonable effort.
This was run on 5268 JSON data files (only the functions to find the GitHub tags and source jars on central) and following are the results we got.
- GitHub repo links were found for 1475 dependencies. (28%)
- GitHub repo links were not found for 3793 dependencies. (72%)
- Relevant tags were found for 1112 dependency updates out of those 1475 repos. (75.4%) (not found for 363 which is 24.6%)
- Considering all 5268 data, the percentage of finding relevant tags was 21.1%.
- Maven source links were found for 4642 dependencies out of 5268. (88.1%)
Note:
- The dependencies were not unique.
- The group ID and the the artifact ID of the dependency were used to find the owner and repo name when looking for GitHub repo links for the dependency. Therefore, the dependencies that have GitHub repositories but have different names were not identified.
I'm surprised, in what situation do we fail to find the source link?
- Source links were searched only in the default maven central repository https://repo1.maven.org/maven2/.
- For pom type dependencies such as google-cloud-bom source jars were not found.
- Even some jar type dependencies did not have source jars uploaded. (https://repo1.maven.org/maven2/org/webjars/font-awesome/6.2.0/)
We'll discuss those two aspects in the paper (links to git tags and links to source packages)