Skip to content

Allow Setuptools detector to succeed with empty BOM when no dependencies found#1738

Open
bd-spratikbharti wants to merge 1 commit into
masterfrom
IDETECT-5078
Open

Allow Setuptools detector to succeed with empty BOM when no dependencies found#1738
bd-spratikbharti wants to merge 1 commit into
masterfrom
IDETECT-5078

Conversation

@bd-spratikbharti
Copy link
Copy Markdown
Collaborator

Description

Summary

  • Setuptools detector now succeeds with empty BOM when no dependencies are declared
  • Aligns behavior with Maven, Gradle, NPM, and other detectors
  • Fixes CI pipeline failures for Python projects without dependencies

Changes

  • Added null check in SetupToolsTomlParser to handle missing [project].dependencies
  • Modified resolveSetupToolsParser() to return default parser instead of null
  • Removed SetupToolsNoDependenciesDetectableResult check from extractable()
  • Added warning log when no dependencies are found

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants