@@ -10,10 +10,10 @@ import (
1010 "path/filepath"
1111 "runtime"
1212
13+ "context"
1314 "github.com/murphysecurity/murphysec/env"
1415 "github.com/murphysecurity/murphysec/model"
1516 "go.uber.org/zap"
16- "golang.org/x/net/context"
1717)
1818
1919const pipConf = `[global]
@@ -309,12 +309,12 @@ func Run(ctx context.Context, dir string, logger *zap.SugaredLogger, nvMp map[st
309309 if err := installpipdeptree (venvPath , logger ); err != nil {
310310 return nil , err
311311 }
312- // 读取新创建的 requirements.txt
312+ // Read generated requirements.txt
313313 data , err := readTextFile (requirementsPath , 64 * 1024 )
314314 if err != nil {
315315 logger .Warnf ("read requirement: %s %v" , requirementsPath , err )
316316 }
317- // 对比原本的 requirements.txt 拿到原本包的版本
317+ // Restore versions from original requirements when needed
318318 oldRequirements := parseRequirements (string (data ))
319319 for k , v := range nvMp {
320320 if newV , ok := oldRequirements [k ]; ok && newV != v {
@@ -331,9 +331,9 @@ func Run(ctx context.Context, dir string, logger *zap.SugaredLogger, nvMp map[st
331331 mod = append (mod , buildTree (j , 0 ))
332332 }
333333 }
334- // 对于没有pip install成功的依赖 只加入pipreqs中列出的直接依赖
334+ // Keep direct dependencies even when pip install does not succeed
335335 directDependenceSurvival (& mod , oldRequirements )
336- // 对于pipreqs生成的requirements.txt 中未列出的直接依赖加入到依赖树中直接依赖一层
336+ // Add direct dependencies inferred by pipreqs.
337337 data , err = readTextFile (venvRequirementsPath , 64 * 1024 )
338338 if err != nil {
339339 logger .Warnf ("read requirement: %s %v" , requirementsPath , err )
0 commit comments