Track primary gem in GemfileLock parser #3072

Signed-off-by: Jono Yang <jyang@nexb.com>

Author: JonoYang

src/packagedcode/gemfile_lock.py

@@ -368,6 +368,9 @@ def __init__(self, lockfile):
         # the final tree of dependencies, keyed by name
         self.dependency_tree = {}
 
+        # the package that the gemfile.lock is for
+        self.primary_gem = None
+
         # a flat dict of all gems, keyed by name
         self.all_gems = {}
 
@@ -399,6 +402,9 @@ def __init__(self, lockfile):
         # finally refine the collected data
         self.refine()
 
+        # set primary gem
+        self.set_primary_gem()
+
     def reset_state (self):
         self.state = None
         self.current_options = {}
@@ -409,6 +415,16 @@ def refine(self):
         for gem in self.all_gems.values():
             gem.refine()
 
+    def set_primary_gem(self):
+        for gem in self.all_gems.values():
+            if gem.type == PATH:
+                self.primary_gem = Gem(
+                    gem.name,
+                    gem.version,
+                    gem.platform,
+                )
+                break
+
     def get_or_create(self, name, version=None, platform=None):
         """
         Return an existing gem if it exists or creates a new one.

src/packagedcode/rubygems.py

@@ -256,32 +256,56 @@ def parse(cls, location):
         if not all_gems:
             return
 
-        main_gem = all_gems[0]
-        deps = [
-            models.DependentPackage(
-                purl=PackageURL(
-                    type='gem',
-                    name=dep.name,
-                    version=dep.version
-                ).to_string(),
-                extracted_requirement=', '.join(dep.requirements),
-                scope='dependencies',
-                is_runtime=True,
-                is_optional=False,
-                is_resolved=True,
-            ) for dep in all_gems[1:]
-        ]
-        urls = get_urls(main_gem.name, main_gem.version)
-
-        yield models.PackageData(
-            datasource_id=cls.datasource_id,
-            primary_language=cls.default_primary_language,
-            type=cls.default_package_type,
-            name=main_gem.name,
-            version=main_gem.version,
-            dependencies=deps,
-            **urls
-        )
+        primary_gem = gemfile_lock.primary_gem
+        if primary_gem:
+            deps = [
+                models.DependentPackage(
+                    purl=PackageURL(
+                        type='gem',
+                        name=dep.name,
+                        version=dep.version
+                    ).to_string(),
+                    extracted_requirement=', '.join(dep.requirements),
+                    scope='dependencies',
+                    is_runtime=True,
+                    is_optional=False,
+                    is_resolved=True,
+                ) for dep in all_gems[1:]
+            ]
+            urls = get_urls(primary_gem.name, primary_gem.version)
+
+            yield models.PackageData(
+                datasource_id=cls.datasource_id,
+                primary_language=cls.default_primary_language,
+                type=cls.default_package_type,
+                name=primary_gem.name,
+                version=primary_gem.version,
+                dependencies=deps,
+                **urls
+            )
+        else:
+            deps = [
+                models.DependentPackage(
+                    purl=PackageURL(
+                        type='gem',
+                        name=gem.name,
+                        version=gem.version
+                    ).to_string(),
+                    extracted_requirement=', '.join(gem.requirements),
+                    # FIXME: get proper scope... This does not seem right
+                    scope='dependencies',
+                    is_runtime=True,
+                    is_optional=False,
+                    is_resolved=True,
+                ) for gem in all_gems
+            ]
+
+            yield models.PackageData(
+                datasource_id=cls.datasource_id,
+                type=cls.default_package_type,
+                dependencies=deps,
+                primary_language=cls.default_primary_language,
+            )
 
 
 class GemfileLockInExtractedGemHandler(GemfileLockHandler):