Scan Report
Created by ORT, the OSS Review Toolkit, version cc543c9380-dirty on 2023-05-25T07:49:21.640985Z.

Project

Scanned revision 48669f48d43779f16afa89696640f1ac354af636 of Git repository https://github.com/eclipse/che-theia-hosted-plugin-manager-extension.git

Index

Rule Violation Summary (0 errors, 0 warnings, 0 hints to resolve)

No rule violations found.

Issue Summary (2 errors, 0 warnings, 0 hints to resolve)

Issues from excluded components are not shown in this summary.

Packages

# Package Analyzer Issues Scanner Issues
1 Yarn::package.json: Yarn::package.json:

  • 2023-05-25T07:48:51.296182401Z [ERROR]: Yarn - Resolving Yarn dependencies for path 'package.json' failed with: IOException: Running 'yarn install --ignore-scripts --ignore-engines' in '/project' failed with exit code 128:
    warning Pattern ["@eclipse-che/api@latest"] is trying to unpack in the same destination "/home/ort/.cache/yarn/v6/npm-@eclipse-che-api-6.16.1-5b5e70285cf27d525df3752c938388e36f7925d6-integrity/node_modules/@eclipse-che/api" as pattern ["@eclipse-che/api@^6.16.1"]. This could result in non-deterministic behavior, skipping.
    error Command failed.
    Exit code: 128
    Command: git
    Arguments: ls-remote --tags --heads git://github.com/stoplightio/moxios
    Directory: /project
    Output:
    fatal: unable to connect to github.com:
    github.com[0: 140.82.112.3]: errno=Connection timed out

 Yarn::package.json:

  • 2023-05-25T07:48:59.646857066Z [ERROR]: scanner - Could not resolve provenance for package 'Yarn::package.json:': IOException: Could not resolve provenance for 'Yarn::package.json:' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"

Yarn::package.json: (package.json)

VCS Information

Type Git
URL https://github.com/eclipse/che-theia-hosted-plugin-manager-extension.git
Path
Revision 48669f48d43779f16afa89696640f1ac354af636

Packages

# Package Scopes Licenses Analyzer Issues Scanner Issues
1 Yarn::package.json:

  • 2023-05-25T07:48:51.296182401Z [ERROR]: Yarn - Resolving Yarn dependencies for path 'package.json' failed with: IOException: Running 'yarn install --ignore-scripts --ignore-engines' in '/project' failed with exit code 128:
    warning Pattern ["@eclipse-che/api@latest"] is trying to unpack in the same destination "/home/ort/.cache/yarn/v6/npm-@eclipse-che-api-6.16.1-5b5e70285cf27d525df3752c938388e36f7925d6-integrity/node_modules/@eclipse-che/api" as pattern ["@eclipse-che/api@^6.16.1"]. This could result in non-deterministic behavior, skipping.
    error Command failed.
    Exit code: 128
    Command: git
    Arguments: ls-remote --tags --heads git://github.com/stoplightio/moxios
    Directory: /project
    Output:
    fatal: unable to connect to github.com:
    github.com[0: 140.82.112.3]: errno=Connection timed out

  • 2023-05-25T07:48:59.646857066Z [ERROR]: scanner - Could not resolve provenance for package 'Yarn::package.json:': IOException: Could not resolve provenance for 'Yarn::package.json:' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"

Repository Configuration


---
excludes:
  paths:
  - pattern: "**/META-INF/DEPENDENCIES"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/META-INF/NOTICE*"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/*.svg"
    reason: "BUILD_TOOL_OF"
    comment: "SVG files do not contain any license information."
  - pattern: "package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Does not contain any license information."