Skip to content

fix: deterministic package repo tie-break #4263

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
epipav wants to merge 3 commits into
base: main
Choose a base branch
from
+8 −5
Open

fix: deterministic package repo tie-break #4263

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
341314e
fix: deterministic package repo tie-break
epipav Jun 25, 2026
90d64d5
Merge branch 'main' into fix/package-repo-tiebreak
epipav Jun 25, 2026
ecab2d3
style: format pkg repo pipe node
epipav Jun 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions services/libs/data-access-layer/src/osspckgs/api.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -312,7 +312,7 @@ export async function getPackageStatusCounts(
FROM package_repos pr
JOIN repos r ON r.id = pr.repo_id
WHERE pr.package_id = p.id
ORDER BY pr.confidence DESC
ORDER BY pr.confidence DESC, pr.repo_id DESC
LIMIT 1
) r_sc ON true
${where}
Expand Down Expand Up @@ -492,7 +492,7 @@ export async function listPackagesForApi(
FROM package_repos pr
JOIN repos r ON r.id = pr.repo_id
WHERE pr.package_id = p.id
ORDER BY pr.confidence DESC
ORDER BY pr.confidence DESC, pr.repo_id DESC
LIMIT 1
) r_sc ON true`

Expand Down Expand Up @@ -714,7 +714,7 @@ export async function getPackageDetailByPurl(
SELECT pr2.repo_id, pr2.confidence
FROM package_repos pr2
WHERE pr2.package_id = p.id
ORDER BY pr2.confidence DESC, (pr2.source = 'declared') DESC
ORDER BY pr2.confidence DESC, (pr2.source = 'declared') DESC, pr2.repo_id DESC
LIMIT 1
) pr ON true
LEFT JOIN repos r ON r.id = pr.repo_id
Expand Down Expand Up @@ -781,7 +781,7 @@ export async function listPackagesForScatter(
FROM package_repos pr
JOIN repos r ON r.id = pr.repo_id
WHERE pr.package_id = p.id
ORDER BY pr.confidence DESC
ORDER BY pr.confidence DESC, pr.repo_id DESC
LIMIT 1
) r_sc ON true
WHERE p.is_critical = true
Expand Down
5 changes: 4 additions & 1 deletion services/libs/tinybird/pipes/ossPackages_enriched.pipe
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,10 @@ SQL >

NODE ossPackages_enriched_pkg_repo
SQL >
SELECT packageId, argMax(repoId, (toFloat64OrZero(confidence), verifiedAt)) AS repoId, 1 AS hasRepo
SELECT
packageId,
argMax(repoId, (toFloat64OrZero(confidence), verifiedAt, repoId)) AS repoId,
1 AS hasRepo
FROM packageRepos FINAL
GROUP BY packageId

Expand Down
Loading