Fix dependency issues

[AyanSinhaMahapatra]

scancode-toolkit 31.2.3 and 31.2.4 has bugfixes for a number of dependency issues which was breaking toolkit and others. These dependency fixes were:

• spdx-tools has been pinned to 0.7.0a3 to guard against upcoming breaking changes.

• the installation issues with packaging version 22.0 is fixed by replacing it with packvers

• license index unpickling issue because of the new attrs release 22.2.0 is fixed by vendoring attrs for use in the license index code.

Signed-off-by: Ayan Sinha Mahapatra [email protected]

[AyanSinhaMahapatra]

We still need to merge an release aboutcode-org/python-inspector#109 for this though. I'm getting this error on docker compose up, which is basically aboutcode-org/python-inspector#108:
https://github.com/nexB/scancode.io/actions/runs/3913831012/jobs/6690190714#step:5:45

[swastkk]

Can I work on this @AyanSinhaMahapatra ?

[AyanSinhaMahapatra]

@swastkk you already did! Thanks ++

Here we just need to get python-inspector released and then scancode.io released (hopefully if nothing else breaks), for which we need to tag and push, and only maintainers have access.

[swastkk]

@swastkk you already did! Thanks ++

Here we just need to get python-inspector released and then scancode.io released (hopefully if nothing else breaks), for which we need to tag and push, and only maintainers have access.

Okay ✨

[AyanSinhaMahapatra]

@pombredanne this is all green!

[pombredanne]

LGTM!