Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

POST api.clearlydefined.io/definitions returns unexpected data when using http protocol instead of https #621

Closed
MichaelTsengLZ opened this issue Sep 26, 2019 · 6 comments
Closed

POST api.clearlydefined.io/definitions returns unexpected data when using http protocol instead of https #621

MichaelTsengLZ opened this issue Sep 26, 2019 · 6 comments
Assignees
@ignacionr

Comments

@MichaelTsengLZ
Copy link
Contributor

MichaelTsengLZ commented Sep 26, 2019 •
edited
Loading

For example:
Post http://api.clearlydefined.io/definitions
Body: ["npm/npmjs/-/redie/0.1.0"]

Response Json:

{
    "data": [
        {
            "described": {
                "releaseDate": "2016-11-11",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "10up",
                    "name": "ElasticPress",
                    "revision": "dbcb82f4bdfa56236ea48c0cc8a33c403d780e78",
                    "url": "https://github.com/10up/ElasticPress/tree/dbcb82f4bdfa56236ea48c0cc8a33c403d780e78"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/10up/elasticpress",
                    "version": "https://packagist.org/packages/10up/elasticpress#2.1.2",
                    "download": "https://api.github.com/repos/10up/ElasticPress/zipball/dbcb82f4bdfa56236ea48c0cc8a33c403d780e78"
                },
                "hashes": {
                    "sha1": "39fe4e20bf40551b81e87e2d65244788a6af5d9e",
                    "sha256": "a914184652de654cb2cc4f2b281ee0c284b9094aef6125143dac4398e6eeb369"
                },
                "files": 48,
                "tools": [
                    "clearlydefined/1.2.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "NOASSERTION",
                "toolScore": {
                    "total": 1,
                    "declared": 0,
                    "discovered": 1,
                    "consistency": 0,
                    "spdx": 0,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 46,
                            "parties": [
                                "Copyright (c) 2013 SearchPress",
                                "Copyright (c) 2012-2013 Automattic",
                                "Copyright (c) 2016 Taylor Lovett, Matt Gross, Aaron Holbrook"
                            ]
                        },
                        "discovered": {
                            "unknown": 43,
                            "expressions": [
                                "GPL-2.0-only",
                                "GPL-2.0-only AND GPL-2.0-or-later",
                                "GPL-2.0-or-later"
                            ]
                        },
                        "files": 48
                    }
                },
                "score": {
                    "total": 1,
                    "declared": 0,
                    "discovered": 1,
                    "consistency": 0,
                    "spdx": 0,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "10up",
                "name": "elasticpress",
                "revision": "2.1.2"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T02:25:04.563Z"
            },
            "scores": {
                "effective": 50,
                "tool": 50
            }
        },
        {
            "described": {
                "releaseDate": "2018-12-06",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "10up",
                    "name": "ElasticPress",
                    "revision": "94592484a970ac5a9c7a3bcbfa1d373dc9de4574",
                    "url": "https://github.com/10up/ElasticPress/tree/94592484a970ac5a9c7a3bcbfa1d373dc9de4574"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/10up/elasticpress",
                    "version": "https://packagist.org/packages/10up/elasticpress#2.7.0",
                    "download": "https://api.github.com/repos/10up/ElasticPress/zipball/94592484a970ac5a9c7a3bcbfa1d373dc9de4574"
                },
                "hashes": {
                    "sha1": "86779a57bc9cac4ff76976eb045c1d5d9f402f30",
                    "sha256": "2c99812da8e4a9e6ee8c8dc636a2a89e5700860c098782611d2b7eedaf93f365"
                },
                "files": 78,
                "tools": [
                    "clearlydefined/1.2.0",
                    "licensee/9.13.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "GPL-2.0-only",
                "toolScore": {
                    "total": 47,
                    "declared": 30,
                    "discovered": 2,
                    "consistency": 0,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 73,
                            "parties": [
                                "Copyright (c) 2013 SearchPress",
                                "Copyright (c) 2014 Aaron Holbrook",
                                "Copyright (c) 2012-2013 Automattic",
                                "Copyright (c) 2018 Taylor Lovett, Matt Gross, Aaron Holbrook"
                            ]
                        },
                        "discovered": {
                            "unknown": 70,
                            "expressions": [
                                "GPL-2.0-only",
                                "GPL-2.0-only AND GPL-2.0-or-later",
                                "GPL-2.0-or-later",
                                "MIT"
                            ]
                        },
                        "files": 78
                    }
                },
                "score": {
                    "total": 47,
                    "declared": 30,
                    "discovered": 2,
                    "consistency": 0,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "10up",
                "name": "elasticpress",
                "revision": "2.7.0"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-09-21T02:37:34.423Z"
            },
            "scores": {
                "effective": 73,
                "tool": 73
            }
        },
        {
            "described": {
                "releaseDate": "2012-07-13",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "2085020",
                    "name": "api_pingdom",
                    "revision": "68aaf431a73120c840f4408703d5abba09fbd57c",
                    "url": "https://github.com/2085020/api_pingdom/tree/68aaf431a73120c840f4408703d5abba09fbd57c"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/2085020/api_pingdom",
                    "version": "https://packagist.org/packages/2085020/api_pingdom#v0.0.2",
                    "download": "https://api.github.com/repos/2085020/api_pingdom/zipball/68aaf431a73120c840f4408703d5abba09fbd57c"
                },
                "hashes": {
                    "sha1": "d62686f0418bd5ff1efc9cb1bfc33eb711ef61ec",
                    "sha256": "65f3eeec986c74eef8d7cdcbbfc7feb8bb3eda78cddf3c2df3a71b3934ea1621"
                },
                "files": 9,
                "tools": [
                    "clearlydefined/1.2.0",
                    "licensee/9.13.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "2085020",
                "name": "api_pingdom",
                "revision": "0.0.2"
            },
            "licensed": {
                "toolScore": {
                    "total": 3,
                    "declared": 0,
                    "discovered": 3,
                    "consistency": 0,
                    "spdx": 0,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 8,
                            "parties": [
                                "Copyright (c) 2011 Nils Adermann, Jordi Boggiano",
                                "(c) Nils Adermann <naderman@naderman.de> Jordi Boggiano <j.boggiano@seld.be>"
                            ]
                        },
                        "discovered": {
                            "unknown": 8,
                            "expressions": [
                                "GPL-2.0-only AND LGPL-2.0-only AND MIT AND NOASSERTION"
                            ]
                        },
                        "files": 9
                    }
                },
                "score": {
                    "total": 3,
                    "declared": 0,
                    "discovered": 3,
                    "consistency": 0,
                    "spdx": 0,
                    "texts": 0
                }
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T02:48:38.774Z"
            },
            "scores": {
                "effective": 51,
                "tool": 51
            }
        },
        {
            "described": {
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "shivas",
                    "name": "versioning-bundle",
                    "revision": "6fc468baccaa9705391fefa4f8b6ad6ec9661d62",
                    "url": "https://github.com/shivas/versioning-bundle/tree/6fc468baccaa9705391fefa4f8b6ad6ec9661d62"
                },
                "hashes": {
                    "sha1": "acd94b9e7de33b938e1b857932c8d9903db069a2",
                    "sha256": "70890d12b5f6114ae6591eace934933cdfeb71d9f9cbf9f149bdad466935c9d3"
                },
                "files": 14,
                "releaseDate": "2013-07-23",
                "urls": {
                    "registry": "https://packagist.org/packages/20steps/versioning-bundle",
                    "version": "https://packagist.org/packages/20steps/versioning-bundle#1.0.0-RC2",
                    "download": "https://api.github.com/repos/20steps/versioning-bundle/zipball/6fc468baccaa9705391fefa4f8b6ad6ec9661d62"
                },
                "projectWebsite": "https://github.com/shivas/versioning-bundle",
                "tools": [
                    "clearlydefined/1.2.0"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 14
                        },
                        "discovered": {
                            "unknown": 14
                        },
                        "files": 14
                    }
                },
                "score": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "20steps",
                "name": "versioning-bundle",
                "revision": "1.0.0-RC2"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T02:40:55.458Z"
            },
            "scores": {
                "effective": 80,
                "tool": 80
            }
        },
        {
            "described": {
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "21stdigital",
                    "name": "bedrock",
                    "revision": "deb1dbd0185c1a9fe65c90ba441e1345ca94606e",
                    "url": "https://github.com/21stdigital/bedrock/tree/deb1dbd0185c1a9fe65c90ba441e1345ca94606e"
                },
                "hashes": {
                    "sha1": "53eec0ce84ebdf8e14f220942b255582f1d2b8f8",
                    "sha256": "8b9656b1fe87bab5373ee19093e818e9d25f666ba968e7e8615b9166ff444ca2"
                },
                "files": 31,
                "releaseDate": "2015-02-22",
                "urls": {
                    "registry": "https://packagist.org/packages/21stdigital/bedrock",
                    "version": "https://packagist.org/packages/21stdigital/bedrock#1.3.4",
                    "download": "https://api.github.com/repos/21stdigital/bedrock/zipball/deb1dbd0185c1a9fe65c90ba441e1345ca94606e"
                },
                "projectWebsite": "http://roots.io/wordpress-stack/",
                "tools": [
                    "clearlydefined/1.2.0"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 31
                        },
                        "discovered": {
                            "unknown": 31
                        },
                        "files": 31
                    }
                },
                "score": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "21stdigital",
                "name": "bedrock",
                "revision": "1.3.4"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T02:42:12.318Z"
            },
            "scores": {
                "effective": 80,
                "tool": 80
            }
        },
        {
            "described": {
                "releaseDate": "2013-12-17",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "2600hz",
                    "name": "kazoo-php-sdk",
                    "revision": "e7fdd59fd1267dc038061e2d621d69fbe9ad3c99",
                    "url": "https://github.com/2600hz/kazoo-php-sdk/tree/e7fdd59fd1267dc038061e2d621d69fbe9ad3c99"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/2600hz/kazoo-php-sdk",
                    "version": "https://packagist.org/packages/2600hz/kazoo-php-sdk#1.0.0",
                    "download": "https://api.github.com/repos/2600hz/kazoo-php-sdk/zipball/e7fdd59fd1267dc038061e2d621d69fbe9ad3c99"
                },
                "projectWebsite": "http://github.com/2600hz/kazoo-php-sdk",
                "hashes": {
                    "sha1": "f1618f5b1500d2e30cb6afb66994de5e5ac51010",
                    "sha256": "c11fb56399e8f56d3a6be8e795e4917acb9211cf34a27bc913b6b716204288fc"
                },
                "files": 146,
                "tools": [
                    "clearlydefined/1.2.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 45,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 0,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 139,
                            "parties": [
                                "Copyright (c) 2013, Ben Wann",
                                "Copyright (c) 2013, 2600hz, Inc.",
                                "Copyright (c) 2011 Kenneth Reitz.",
                                "Copyright 2010 by Armin Ronacher.",
                                "Copyright (c) 2010 by Armin Ronacher.",
                                "Copyright 2007-2010 by the Sphinx team",
                                "Copyright . https://github.com/2600hz/kazoo-php-sdk'",
                                "copyright unicode(datetime.utcnow().year) + u', 2600hz Inc",
                                "Copyright 2010 by Armin Ronacher. :license Flask Design License"
                            ]
                        },
                        "discovered": {
                            "unknown": 141,
                            "expressions": [
                                "BSD-3-Clause",
                                "MIT",
                                "NOASSERTION"
                            ]
                        },
                        "files": 146
                    }
                },
                "score": {
                    "total": 45,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 0,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "2600hz",
                "name": "kazoo-php-sdk",
                "revision": "1.0.0"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T02:53:41.61Z"
            },
            "scores": {
                "effective": 72,
                "tool": 72
            }
        },
        {
            "described": {
                "releaseDate": "2015-03-20",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "2amigos",
                    "name": "yii2-date-picker-widget",
                    "revision": "cd98496025e09a5d8d20071157eb016a2d909220",
                    "url": "https://github.com/2amigos/yii2-date-picker-widget/tree/cd98496025e09a5d8d20071157eb016a2d909220"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/2amigos/yii2-date-picker-widget",
                    "version": "https://packagist.org/packages/2amigos/yii2-date-picker-widget#1.0.1",
                    "download": "https://api.github.com/repos/2amigos/yii2-date-picker-widget/zipball/cd98496025e09a5d8d20071157eb016a2d909220"
                },
                "projectWebsite": "http://yiiwheels.com/extension/bootstrap-datepicker",
                "hashes": {
                    "sha1": "84af616baf4ab347e46033dc7994a7181a78a658",
                    "sha256": "c9c39c41b24a620a90eea04161c7cb5f7f1a5d2a1a52868488e4f0c6c6eb57fe"
                },
                "files": 10,
                "tools": [
                    "clearlydefined/1.2.0",
                    "licensee/9.13.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "BSD-3-Clause",
                "toolScore": {
                    "total": 78,
                    "declared": 30,
                    "discovered": 3,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 15
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 4,
                            "parties": [
                                "Copyright (c) 2013-2015, 2amigOS! Consulting Group LLC.",
                                "Copyright (c) 2013-2015 2amigOS! Consulting Group LLC link http://2amigos.us"
                            ]
                        },
                        "discovered": {
                            "unknown": 9,
                            "expressions": [
                                "BSD-3-Clause"
                            ]
                        },
                        "files": 10
                    }
                },
                "score": {
                    "total": 78,
                    "declared": 30,
                    "discovered": 3,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 15
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "2amigos",
                "name": "yii2-date-picker-widget",
                "revision": "1.0.1"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-09-20T22:14:59.83Z"
            },
            "scores": {
                "effective": 89,
                "tool": 89
            }
        },
        {
            "described": {
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "64robots",
                    "name": "nova-fields",
                    "revision": "b3684767425c2061742535fc61fa0509dc1b2e9b",
                    "url": "https://github.com/64robots/nova-fields/tree/b3684767425c2061742535fc61fa0509dc1b2e9b"
                },
                "hashes": {
                    "sha1": "616868f2c1cd36bfc93162233fbe20a0ae1fa059",
                    "sha256": "ccfe43e9569681c47936c497c5b41da2a1095096070dca295176d9f31fe945cd"
                },
                "files": 75,
                "releaseDate": "2018-11-20",
                "urls": {
                    "registry": "https://packagist.org/packages/64robots/nova-fields",
                    "version": "https://packagist.org/packages/64robots/nova-fields#0.4.4",
                    "download": "https://api.github.com/repos/64robots/nova-fields/zipball/b3684767425c2061742535fc61fa0509dc1b2e9b"
                },
                "tools": [
                    "clearlydefined/1.2.0"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 75
                        },
                        "discovered": {
                            "unknown": 75
                        },
                        "files": 75
                    }
                },
                "score": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "64robots",
                "name": "nova-fields",
                "revision": "0.4.4"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T06:11:11.59Z"
            },
            "scores": {
                "effective": 80,
                "tool": 80
            }
        },
        {
            "described": {
                "releaseDate": "2019-07-14",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "68publishers",
                    "name": "smart-nette-component",
                    "revision": "1c2719cce21ec8fc9f1ee8767c88660a6bdb5bbb",
                    "url": "https://github.com/68publishers/smart-nette-component/tree/1c2719cce21ec8fc9f1ee8767c88660a6bdb5bbb"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/68publishers/smart-nette-component",
                    "version": "https://packagist.org/packages/68publishers/smart-nette-component#v0.1.1",
                    "download": "https://api.github.com/repos/68publishers/smart-nette-component/zipball/1c2719cce21ec8fc9f1ee8767c88660a6bdb5bbb"
                },
                "hashes": {
                    "sha1": "2695dc28b092dfe7365afb9842b7b9db4664d9b5",
                    "sha256": "bd8e3750b6486c0e2b6a8a4e419f5ba400c2bff4bb090c02bf9546da46d298be"
                },
                "files": 26,
                "tools": [
                    "clearlydefined/1.2.0",
                    "licensee/9.13.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 76,
                    "declared": 30,
                    "discovered": 1,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 15
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 25,
                            "parties": [
                                "Copyright (c) 2019 68 Publishers"
                            ]
                        },
                        "discovered": {
                            "unknown": 24,
                            "expressions": [
                                "MIT"
                            ]
                        },
                        "files": 26
                    }
                },
                "score": {
                    "total": 76,
                    "declared": 30,
                    "discovered": 1,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 15
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "68publishers",
                "name": "smart-nette-component",
                "revision": "0.1.1"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T07:03:24.089Z"
            },
            "scores": {
                "effective": 88,
                "tool": 88
            }
        },
        {
            "described": {
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "6dreams",
                    "name": "parallel-pool",
                    "revision": "a4de9e1f26c216e54d09ec42ea102e8f5b443974",
                    "url": "https://github.com/6dreams/parallel-pool/tree/a4de9e1f26c216e54d09ec42ea102e8f5b443974"
                },
                "hashes": {
                    "sha1": "dc84796552bc4605e9ea61d73f2493c547162775",
                    "sha256": "bf8fce8820624f95b67f5379f9dd167ed18a8c15bd1e25ce4a9dc73eea2f368b"
                },
                "files": 12,
                "releaseDate": "2019-08-15",
                "urls": {
                    "registry": "https://packagist.org/packages/6dreams/parallel-pool",
                    "version": "https://packagist.org/packages/6dreams/parallel-pool#1.1.2",
                    "download": "https://api.github.com/repos/6dreams/parallel-pool/zipball/a4de9e1f26c216e54d09ec42ea102e8f5b443974"
                },
                "tools": [
                    "clearlydefined/1.2.0"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 12
                        },
                        "discovered": {
                            "unknown": 12
                        },
                        "files": 12
                    }
                },
                "score": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "6dreams",
                "name": "parallel-pool",
                "revision": "1.1.2"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T06:03:25.943Z"
            },
            "scores": {
                "effective": 80,
                "tool": 80
            }
        },
        {
            "described": {
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "A5hleyRich",
                    "name": "wp-queue",
                    "revision": "134326ad48c37439dc63e7ab06a098673135f982",
                    "url": "https://github.com/A5hleyRich/wp-queue/tree/134326ad48c37439dc63e7ab06a098673135f982"
                },
                "hashes": {
                    "sha1": "525d6334213801b3542523ced0ba9c6c8a724fd7",
                    "sha256": "982883aba04cb8f0d9199cee6ef40305136fe965ab91decc5f6042f6e8fae41b"
                },
                "files": 23,
                "releaseDate": "2017-10-09",
                "urls": {
                    "registry": "https://packagist.org/packages/a5hleyrich/wp-queue",
                    "version": "https://packagist.org/packages/a5hleyrich/wp-queue#1.1.1",
                    "download": "https://api.github.com/repos/A5hleyRich/wp-queue/zipball/134326ad48c37439dc63e7ab06a098673135f982"
                },
                "tools": [
                    "clearlydefined/1.2.0"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 23
                        },
                        "discovered": {
                            "unknown": 23
                        },
                        "files": 23
                    }
                },
                "score": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "a5hleyrich",
                "name": "wp-queue",
                "revision": "1.1.1"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T07:39:27.389Z"
            },
            "scores": {
                "effective": 80,
                "tool": 80
            }
        },
        {
            "described": {
                "releaseDate": "2019-09-02",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "aacassandra",
                    "name": "mesosfer-lib",
                    "revision": "b6f4511e5c3cdbbe02b5897093adde7e8551d46b",
                    "url": "https://github.com/aacassandra/mesosfer-lib/tree/b6f4511e5c3cdbbe02b5897093adde7e8551d46b"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/aacassandra/mesosfer-lib",
                    "version": "https://packagist.org/packages/aacassandra/mesosfer-lib#19.9.2",
                    "download": "https://api.github.com/repos/aacassandra/mesosfer-lib/zipball/b6f4511e5c3cdbbe02b5897093adde7e8551d46b"
                },
                "hashes": {
                    "sha1": "ed5dd28145644f7ad0b67433ea399600e22b0f58",
                    "sha256": "a4ed83bc51024f1a042a638f8bb297d84ab355a5ae4826bf0a52277681ac0b90"
                },
                "files": 6,
                "tools": [
                    "clearlydefined/1.2.0",
                    "licensee/9.13.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "MIT",
                "toolScore": {
                    "total": 79,
                    "declared": 30,
                    "discovered": 4,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 15
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 5,
                            "parties": [
                                "Copyright (c) 2019 Alauddin Afif Cassandra"
                            ]
                        },
                        "discovered": {
                            "unknown": 4,
                            "expressions": [
                                "MIT"
                            ]
                        },
                        "files": 6
                    }
                },
                "score": {
                    "total": 79,
                    "declared": 30,
                    "discovered": 4,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 15
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "aacassandra",
                "name": "mesosfer-lib",
                "revision": "19.9.2"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-09-20T15:01:27.595Z"
            },
            "scores": {
                "effective": 89,
                "tool": 89
            }
        },
        {
            "described": {
                "releaseDate": "2017-03-14",
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "aannnaa7",
                    "name": "aws-sdk-php",
                    "revision": "2823e0a0742505f655b0cb3bcdb10844f60e6078",
                    "url": "https://github.com/aannnaa7/aws-sdk-php/tree/2823e0a0742505f655b0cb3bcdb10844f60e6078"
                },
                "urls": {
                    "registry": "https://packagist.org/packages/aannnaa7/aws-sdk-php-minimized",
                    "version": "https://packagist.org/packages/aannnaa7/aws-sdk-php-minimized#3.24.4",
                    "download": "https://api.github.com/repos/aannnaa7/aws-sdk-php/zipball/2823e0a0742505f655b0cb3bcdb10844f60e6078"
                },
                "projectWebsite": "http://aws.amazon.com/sdkforphp",
                "hashes": {
                    "sha1": "a6fe3c3500d9cb987e6e7034ca26f7515ec1fbb5",
                    "sha256": "12508616a6248ac66a89fd4a1098f68912e18ec43abb7d6aff1460d10dbf78c6"
                },
                "files": 577,
                "tools": [
                    "clearlydefined/1.2.0",
                    "licensee/9.13.0",
                    "scancode/3.2.2"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "Apache-2.0",
                "toolScore": {
                    "total": 45,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 0,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 576,
                            "parties": [
                                "Copyright 2010-2014 Amazon.com, Inc.",
                                "Copyright (c) 2014 Michael Dowling, https://github.com/mtdowling"
                            ]
                        },
                        "discovered": {
                            "unknown": 574,
                            "expressions": [
                                "Apache-2.0",
                                "Apache-2.0 AND MIT"
                            ]
                        },
                        "files": 577
                    }
                },
                "score": {
                    "total": 45,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 0,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "aannnaa7",
                "name": "aws-sdk-php-minimized",
                "revision": "3.24.4"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T09:28:15.545Z"
            },
            "scores": {
                "effective": 72,
                "tool": 72
            }
        },
        {
            "described": {
                "sourceLocation": {
                    "type": "git",
                    "provider": "github",
                    "namespace": "aannnaa7",
                    "name": "aws-sdk-php",
                    "revision": "1d0d9b01ac70ea83c381997592c433b8ebe10e19",
                    "url": "https://github.com/aannnaa7/aws-sdk-php/tree/1d0d9b01ac70ea83c381997592c433b8ebe10e19"
                },
                "hashes": {
                    "sha1": "2405c0abdaa818388a0e7afaa2dc625eddf1bae5",
                    "sha256": "ff08abf28813894574565eaadfb6be048257ff066213910fd779ffb508a9d5a3"
                },
                "files": 333,
                "releaseDate": "2015-09-24",
                "urls": {
                    "registry": "https://packagist.org/packages/aannnaa7/aws-sdk-php-minimized",
                    "version": "https://packagist.org/packages/aannnaa7/aws-sdk-php-minimized#3.4.0",
                    "download": "https://api.github.com/repos/aannnaa7/aws-sdk-php/zipball/1d0d9b01ac70ea83c381997592c433b8ebe10e19"
                },
                "projectWebsite": "http://aws.amazon.com/sdkforphp",
                "tools": [
                    "clearlydefined/1.2.0"
                ],
                "toolScore": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                },
                "score": {
                    "total": 100,
                    "date": 30,
                    "source": 70
                }
            },
            "licensed": {
                "declared": "Apache-2.0",
                "toolScore": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                },
                "facets": {
                    "core": {
                        "attribution": {
                            "unknown": 333
                        },
                        "discovered": {
                            "unknown": 333
                        },
                        "files": 333
                    }
                },
                "score": {
                    "total": 60,
                    "declared": 30,
                    "discovered": 0,
                    "consistency": 15,
                    "spdx": 15,
                    "texts": 0
                }
            },
            "coordinates": {
                "type": "composer",
                "provider": "packagist",
                "namespace": "aannnaa7",
                "name": "aws-sdk-php-minimized",
                "revision": "3.4.0"
            },
            "_meta": {
                "schemaVersion": "1.6.1",
                "updated": "2019-08-29T08:22:46.67Z"
            },
            "scores": {
                "effective": 80,
                "tool": 80
            }
        }
        ...
    ],
    "continuationToken": "*****xxx*****"
}
@ignacionr
Copy link
Member

Hello, and thank you for this!

Sorry to ask but what is the data you were expecting, or rather mainly how does the actual response differ from it?

@ignacionr ignacionr self-assigned this Sep 27, 2019
@geneh
Copy link
Contributor

geneh commented Sep 27, 2019

@ignacionr The responses are different for
curl -L https://api.clearlydefined.io/definitions -H "accept: application/json" "Content-Type: application/json" -d "[\"npm/npmjs/-/redie/0.3.0\"]" (correct)
and
curl -L http://api.clearlydefined.io/definitions -H "accept: application/json" "Content-Type: application/json" -d "[\"npm/npmjs/-/redie/0.3.0\"]" (incorrect)
It could be related to CloudFlare redirect rules.

@ignacionr
Copy link
Member

I see. It’s interesting. CloudFlare is only doing http, I assume? Not working as https termination right?

@geneh
Copy link
Contributor

geneh commented Sep 27, 2019

Screen Shot 2019-09-27 at 10 18 57 AM

@ignacionr
Copy link
Member

That is exactly what is happening; the thing is POST doesn't really make proper redirects.
Jeff's original description of that POST endpoint is accurate, it "creates a resource" so what does it mean to create a resource through a redirect? (not very straightforward).

Further explanation of what is happening (and why we endup getting the GET resource) can be found here.

@ignacionr
Copy link
Member

Closing this issue as the direct/practical solution is for API users to understand and cope with POST redirects (which are a special non-trivial case, around the defined HTTP behavior).
Reopen if you want to suggest:

  • changing our CloudFlare HTTPS configuration to handle these things manually
  • changing the endpoint names so that /definitions (POST) do not collide with /definitions (GET) and then API users don't get confused (they would get a method not supported error instead of a seemingly erroneous reply).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ignacionr ignacionr

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@ignacionr @geneh @MichaelTsengLZ