Collect WHEEL files for installed python wheels #4214

AUTHORS.rst

@@ -105,3 +105,4 @@ The following organizations or individuals have contributed to ScanCode:
 - Yash Sharma @yasharmaster
 - Yunus Rahbar @yns88
 - Stefano Zacchiroli @zacchiro
+- Kareem Samy @kaokab33

CHANGELOG.rst

@@ -4,6 +4,11 @@ Changelog
 Next release
 --------------
 
+- Collect WHEEL files for installed python wheels to extract
+  wheel tags needed to reconstruct the original wheel filename
+  for building more detailed PURLs.
+  https://github.com/aboutcode-org/scancode-toolkit/issues/4214
+
 v3.5.0 - 2026-01-15
 -------------------
 

src/packagedcode/pypi.py

@@ -956,6 +956,72 @@ def parse(cls, location, package_only=False):
 
 META_DIR_SUFFIXES = '.dist-info', '.egg-info', 'EGG-INFO',
 
+def parse_wheel_tags(dist_info_path):
+    """
+    Parse the WHEEL file in a .dist-info directory and return a list
+    of tag strings (e.g., ['cp310-cp310-manylinux_2_17_x86_64']).
+
+    A WHEEL file looks like:
+        Wheel-Version: 1.0
+        Generator: bdist_wheel (0.37.1)
+        Root-Is-Purelib: false
+        Tag: cp310-cp310-manylinux_2_17_x86_64
+
+    There can be multiple Tag: lines.
+    """
+    tags = []
+    wheel_version = None
+    generator = None
+    root_is_purelib = None
+
+    if isinstance(dist_info_path, ZipPath):
+        wheel_path = dist_info_path / 'WHEEL'
+        if not wheel_path.exists():
+            return {}
+        content = wheel_path.read_text(encoding='utf-8')
+    else:
+        wheel_path = Path(dist_info_path) / 'WHEEL'
+        if not wheel_path.exists():
+            return {}
+        content = wheel_path.read_text(encoding='utf-8')
+
+    for line in content.strip().splitlines():
+        line = line.strip()
+        if not line or ':' not in line:
+            continue
+
+        key, _, value = line.partition(':')
+        key = key.strip()
+        value = value.strip()
+
+        if key == 'Tag':
+            tags.append(value)
+        elif key == 'Wheel-Version':
+            wheel_version = value
+        elif key == 'Generator':
+            generator = value
+        elif key == 'Root-Is-Purelib':
+            root_is_purelib = value.lower() == 'true'
+
+    return {
+        'wheel_version': wheel_version,
+        'generator': generator,
+        'root_is_purelib': root_is_purelib,
+        'tags': tags,
+    }
+
+def reconstruct_wheel_filename(name, version, tag):
+    """
+    Reconstruct a wheel filename from a package name, version, and tag string.
+
+    For example:
+    >>> reconstruct_wheel_filename('numpy', '1.23.0', 'cp310-cp310-manylinux_2_17_x86_64')
+    'numpy-1.23.0-cp310-cp310-manylinux_2_17_x86_64.whl'
+    >>> reconstruct_wheel_filename('my-package', '2.0', 'py3-none-any')
+    'my_package-2.0-py3-none-any.whl'
+    """
+    safe_name = name.replace('-', '_')
+    return f"{safe_name}-{version}-{tag}.whl"
 
 def parse_metadata(location, datasource_id, package_type, package_only=False):
     """
@@ -993,7 +1059,28 @@ def parse_metadata(location, datasource_id, package_type, package_only=False):
     # nicely?
     dependencies = get_dist_dependencies(dist)
     file_references = list(get_file_references(dist))
-
+
+        # ============= NEW CODE START =============
+    wheel_data = {}
+    if parent.name.endswith('.dist-info') and not isinstance(path, ZipPath):
+        wheel_data = parse_wheel_tags(path)
+
+    wheel_filename = None
+    if wheel_data and wheel_data.get('tags') and name and version:
+        # Use the first tag to reconstruct the filename
+        first_tag = wheel_data['tags'][0]
+        wheel_filename = reconstruct_wheel_filename(name, version, first_tag)
+
+        # Store all wheel metadata in extra_data
+        if wheel_data.get('tags'):
+            extra_data['wheel_tags'] = wheel_data['tags']
+        if wheel_data.get('wheel_version'):
+            extra_data['wheel_version'] = wheel_data['wheel_version']
+        if wheel_data.get('generator'):
+            extra_data['wheel_generator'] = wheel_data['generator']
+        if wheel_data.get('root_is_purelib') is not None:
+            extra_data['root_is_purelib'] = wheel_data['root_is_purelib']
+
     package_data = dict(
         datasource_id=datasource_id,
         type=package_type,
@@ -1011,7 +1098,6 @@ def parse_metadata(location, datasource_id, package_type, package_only=False):
     )
     return models.PackageData.from_data(package_data, package_only)
 
-
 def urlsafe_b64decode(data):
     """
     urlsafe_b64decode without padding

src/scancode/interrupt.py

@@ -39,6 +39,8 @@
    traceback and `value` is None.
 """
 
+import threading
+
 
 class TimeoutError(Exception):  # NOQA
     pass
@@ -80,7 +82,11 @@ class TimeoutError(Exception):  # NOQA
     def interruptible(func, args=None, kwargs=None, timeout=DEFAULT_TIMEOUT):
         """
         POSIX, signals-based interruptible runner.
+        Falls back to non-interruptible execution if not in main thread.
         """
+        # Signals only work in the main thread
+        if threading.current_thread() is not threading.main_thread():
+            return NO_ERROR, func(*(args or ()), **(kwargs or {}))
 
         def handler(signum, frame):
             raise TimeoutError