analyze: How to exclude dependencies when run analyze

[LizZhang315]

Describe the bug

1. Error1: run analyze in go project, go list output include my go project, and ort has a error:
   java.lang.IllegalArgumentException: A replace directive references a module in '/Users/mac/IdeaProjects/myproject' outside of analysis root which is not supported.

2. Error2: run ort analyze in my project root dir with "-i /myproject/root/dir", ort will do nothing and has a log "No definition files found." But there has a "go.mod" file of my project.

3. Error3: run ort analyze will download module of indirect module dependencies, is it right? The module is "git.sr.ht/~sbinet/gg", and ort will request "https://git.sr.ht/~sbinet/gg" to download the code, but the website is no longer accessible. How can I exclude this module when run analyze?

To Reproduce

Steps to reproduce the behavior:

use ort-71.5.0
run cmd:
cd /Users/mac/IdeaProjects/myproject
ort -P ort.analyzer.allowDynamicVersions=true --debug --stacktrace analyze -i /Users/mac/IdeaProjects/myproject/go.mod -o /Users/mac/IdeaProjects/myproject/ort/ort-analyzer

Expected behavior

run success

Console / log output

15:51:54.227 [DefaultDispatcher-worker-1] INFO  org.ossreviewtoolkit.utils.common.ProcessCapture - Running 'go list -deps -json=Module -buildvcs=false ./...' in '/Users/mac/IdeaProjects/myproject'...
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {}
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - [...skipping 15755 lines...]
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - }
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -      "Module": {
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "Path": "private-git-address/org/myproject/v2",
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "Main": true,
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "Dir": "/Users/mac/IdeaProjects/myproject",
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "GoMod": "/Users/mac/IdeaProjects/myproject/go.mod",
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "GoVersion": "1.24"
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -      }
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - }
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - {
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -      "Module": {
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "Path": "private-git-address/org/myproject/v2",
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "Main": true,
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "Dir": "/Users/mac/IdeaProjects/myproject",
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "GoMod": "/Users/mac/IdeaProjects/myproject/go.mod",
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -              "GoVersion": "1.24"
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture -      }
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - }
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - 
15:51:54.535 [DefaultDispatcher-worker-1] DEBUG org.ossreviewtoolkit.utils.common.ProcessCapture - (Above output is limited to each 20 heading and tailing lines.)
java.lang.IllegalArgumentException: A replace directive references a module in '/Users/mac/IdeaProjects/myproject' outside of analysis root which is not supported.
        at org.ossreviewtoolkit.plugins.packagemanagers.go.GoMod.toId(GoMod.kt:302)
        at org.ossreviewtoolkit.plugins.packagemanagers.go.GoMod.resolveDependencies(GoMod.kt:164)
        at org.ossreviewtoolkit.analyzer.PackageManager.resolveDependencies(PackageManager.kt:323)
        at org.ossreviewtoolkit.analyzer.PackageManagerRunner$run$3.invokeSuspend(Analyzer.kt:354)
        at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:34)
        at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:100)
        at kotlinx.coroutines.internal.LimitedDispatcher$Worker.run(LimitedDispatcher.kt:124)
        at kotlinx.coroutines.scheduling.TaskImpl.run(Tasks.kt:89)
        at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:586)
        at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:820)
        at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:717)
        at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:704)
15:51:55.443 [DefaultDispatcher-worker-1] ERROR org.ossreviewtoolkit.analyzer.PackageManager - GoMod failed to resolve dependencies for path '.': IllegalArgumentException: A replace directive references a module in '/Users/mac/IdeaProjects/myproject' outside of analysis root which is not supported.
15:51:55.447 [DefaultDispatcher-worker-1] INFO  org.ossreviewtoolkit.analyzer.PackageManager - GoMod resolved dependencies for path '.' in 25m 21.434117167s.
15:51:55.449 [DefaultDispatcher-worker-1] INFO  kotlinx.coroutines.CoroutineScope - Finished GoMod analysis.
15:51:55.454 [main] INFO  org.ossreviewtoolkit.analyzer.Analyzer - Calling after resolution hooks for 1 manager(s).
15:51:55.454 [main] INFO  org.ossreviewtoolkit.analyzer.Analyzer - Building analyzer result.
15:51:55.493 [main] INFO  org.ossreviewtoolkit.utils.config.ConfigurationResolver - Getting 0 package curation(s) from provider 'RepositoryConfiguration' took 295.542us.
15:51:55.493 [main] INFO  org.ossreviewtoolkit.utils.config.ConfigurationResolver - Getting 0 package curation(s) from provider 'DefaultDir' took 1.041us.
15:51:55.493 [main] INFO  org.ossreviewtoolkit.utils.config.ConfigurationResolver - Getting 0 package curation(s) from provider 'DefaultFile' took 791ns.
15:51:55.493 [main] INFO  org.ossreviewtoolkit.utils.config.ConfigurationResolver - Getting 0 package curation(s) from provider 'Spring' took 8.667us.
Wrote analyzer result to '/Users/mac/IdeaProjects/myproject/ort/ort-analyzer/analyzer-result.yml' (0.01 MiB) in 115.285208ms.
15:51:55.652 [main] DEBUG org.ossreviewtoolkit.plugins.commands.api.utils.ExtensionsKt - Output ORT result file has SHA-1 hash a34cd1448232e768d9a7c83273768a050d30ee82.
The analysis took 25m 21.497247s.
Found 0 project(s) and 0 package(s) in total (not counting excluded ones).
Applied 0 curation(s) from 0 of 4 provider(s).
Resolved issues: 0 errors, 0 warnings, 0 hints.
Unresolved issues: 1 error, 0 warnings, 0 hints.
There is 1 unresolved issue with a severity equal to or greater than the WARNING threshold.
15:51:55.675 [ForkJoinPool-1-worker-1] DEBUG org.eclipse.jgit.internal.util.ShutdownHook - Cleanup org.eclipse.jgit.util.FS$FileStoreAttributes$$Lambda/0x00000070014aa810@2479a3f9 during JVM shutdown

Environment

Output of the ort requirements command (ensure to remove any sensitive information manually):

<copy & paste console output to here; no screenshots please>

Or manually specify:

• ORT version:71.5.0
• Java version: jdk21
• OS:Mac M2 pro

And specify (relevant parts of) your ORT configuration (config.yml):

ort:
  forceOverwrite: true
  enableRepositoryPackageCurations: true
  enableRepositoryPackageConfigurations: true
  analyzer:
    skipExcluded: true
    allow_dynamic_versions: true
    enabled_package_managers: [ GoMod]
  downloader:
    skipExcluded: true
    allowMovingRevisions: true
  scanner:
    skipExcluded: true
    config:
      ScanCode:
        options:
          # commandLine: '--copyright,--license,--info,--strip-root,--timeout,300'
          commandLine: "--copyright --license --info --strip-root --timeout 300 --ignore *.ort.yml --ignore HERE_NOTICE --ignore META-INF/DEPENDENCIES --ignore tests/**"
  allowedProcessEnvironmentVariableNames:
    - GO111MODULE
    - GOPROXY
    - GOPRIVATE
    - GONOSUMDB

Additional context

.ort.yml

analyzer:
  skip_excluded: true
includes:
  paths:
    - pattern: "pkg/**"
      reason: "SOURCE_OF"
excludes:
  paths:
    - pattern: "mocks/**"
      reason: "TEST_TOOL_OF"
      comment: "This directory contains test data which are not distributed."
    - pattern: "*_test.go"
      reason: "TEST_OF"
    - pattern: "test_*.go"
      reason: "TEST_OF"
  scopes:
    - pattern: "vendor"
      reason: "DEV_DEPENDENCY_OF"
      comment: "Packages to build and test the main module."
curations:
  packages:
    - id: "Go::go.etcd.io/etcd@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          revision: "v3.3.17"
    - id: "Go::go.etcd.io/etcd/api/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          path: "api"
          revision: "api/v3.5.9"
    - id: "Go::go.etcd.io/etcd/client/pkg/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          path: "client/pkg"
          revision: "client/pkg/v3.5.9"
    - id: "Go::go.etcd.io/etcd/client/v2@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          path: "client/v2"
          revision: "client/v2.305.9"
    - id: "Go::go.etcd.io/etcd/client/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          path: "client/v3"
          revision: "client/v3.5.9"
    - id: "Go::go.etcd.io/etcd/client/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          path: "client/v3"
          revision: "client/v3.6.6"
    - id: "Go::go.etcd.io/etcd/pkg/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          revision: "pkg/v3.5.9"
          path: "pkg"
    - id: "Go::go.etcd.io/etcd/raft/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          revision: "raft/v3.5.9"
          path: "raft"
    - id: "Go::go.etcd.io/etcd/server/v3@*"
      curations:
        vcs:
          type: "Git"
          url: "https://github.com/etcd-io/etcd"
          revision: "server/v3.5.9"
          path: "server"
    - id: "Go::gopkg.in/yaml.v3:3.0.1"
      curations:
        homepage_url: "https://gopkg.in/yaml.v3"
        vcs:
          type: "Git"
          url: "https://github.com/go-yaml/yaml/tree/v3.0.1"
resolutions:
  issues:
    - message: "IOException: Could not resolve provenance for package "
      reason: SCANNER_ISSUE
      comment: "This is a false positive"
    - message: "A replace directive references a module in "
      reason: BUILD_TOOL_ISSUE
      comment: "This is a false positive"
package_configurations:
   - id: "GoMod::myproject:19c32c70d2ad95cb9c4eee37236e1d297ca0f938"
     vcs:
       type: "Git"
       url: "https://<private-git>/<org>/<myrpoject>"
       revision: "19c32c70d2ad95cb9c4eee37236e1d297ca0f938"
     license_finding_curations:
     - path: "pkg/**"
       concluded_license: "Apache-2.0"
       reason: "NOT_DETECTED"

[fviernau]

@LizZhang315 - is the issue also reproducible if you analyze the directory instead of the file, e.g. with [1]?

[1] ort -P ort.analyzer.allowDynamicVersions=true --debug --stacktrace analyze -i /Users/mac/IdeaProjects/myproject -o /Users/mac/IdeaProjects/myproject/ort/ort-analyzer

[fviernau]

@LizZhang315 can you confirm that the following reproduces the same issue?

./cli/build/install/ort/bin/ort analyze -i ./plugins/package-managers/go/src/funTest/assets/projects/synthetic/gomod/subpkg/go.mod -o .

I believe this to be a general issue with analyzing a single definition file instead of a directory (more common). In case the
definition file references other definition files, the analysis fails. To me this actually makes sense, because
the references have to be resolved as well to some data and for doing so, the target definition files have to be analyzed too.

I wonder if it would make sense to adjust the documentation, to say that when analyzing a single file, there must not be references to other definition files in order for it to work. What do you think @oss-review-toolkit/core-devs ?

[sschuberth]

I wonder if it would make sense to adjust the documentation, to say that when analyzing a single file, there must not be references to other definition files in order for it to work. What do you think @oss-review-toolkit/core-devs ?

I agree to that.

[sschuberth]

2. Error2: run ort analyze in my project root dir with "-i /myproject/root/dir", ort will do nothing and has a log "No definition files found." But there has a "go.mod" file of my project.

If you use -i /Users/mac/IdeaProjects/myproject instead of -i /Users/mac/IdeaProjects/myproject/go.mod that should not happen.

[sschuberth]

3. Error3: run ort analyze will download module of indirect module dependencies, is it right?

Yes.

The module is "git.sr.ht/~sbinet/gg", and ort will request "https://git.sr.ht/~sbinet/gg" to download the code, but the website is no longer accessible.

Actually, https://git.sr.ht/~sbinet/gg works just fine for me.

How can I exclude this module when run analyze?

There are means to deals with this, like package curations, but it seems this is not needed here.

[LizZhang315]

@LizZhang315 - is the issue also reproducible if you analyze the directory instead of the file, e.g. with [1]?

[1] ort -P ort.analyzer.allowDynamicVersions=true --debug --stacktrace analyze -i /Users/mac/IdeaProjects/myproject -o /Users/mac/IdeaProjects/myproject/ort/ort-analyzer

@fviernau If I run this cmd, the output is:

Hoplite is configured to infer which sealed type to choose by inspecting the config values at runtime. This behaviour is now deprecated in favour of explicitly specifying the type through a discriminator field. In 3.0 this new behavior will become the default. To enable this behavior now (and disable this warning), invoke withExplicitSealedTypes() on the ConfigLoaderBuilder.
 ______________________________                                                                    
/        \_______   \__    ___/            The OSS Review Toolkit, version 71.5.0,                 
|    |   | |       _/ |    |               built with JDK 21.0.9+10-LTS, running under Java 21.0.2.
|    |   | |    |   \ |    |               Executing 'analyze' as 'mac' on Mac OS X                
\________/ |____|___/ |____|               with 10 CPUs and a maximum of 8192 MiB of memory.       
                                                                                                   
Environment variables:                                                                            
HOME = /Users/mac                                                                                 
SHELL = /bin/zsh                                                                                  
TERM = xterm-256color                                                                             
JAVA_HOME = /Users/mac/Library/Java/JavaVirtualMachines/openjdk-21.0.2/Contents/Home              
GOPATH = /Users/mac/go                                                                            
                                                                                                  
Looking for ORT configuration in the following file:
        /Users/mac/.ort/config/config.yml

Looking for analyzer-specific configuration in the following files and directories:
        /Users/mac/IdeaProjects/myproject/.ort.yml
        /Users/mac/.ort/config/resolutions.yml (does not exist)
The following 1 package manager(s) are enabled:
        GoMod
The following 4 package curation provider(s) are enabled:
        RepositoryConfiguration, DefaultDir, DefaultFile, Spring
Analyzing project path:
        /Users/mac/IdeaProjects/myproject
No definition files found.
Wrote analyzer result to '/Users/mac/IdeaProjects/myproject/ort/ort-analyzer/analyzer-result.yml' (0.00 MiB) in 230.479417ms.
The analysis took 451.241ms.
Found 0 project(s) and 0 package(s) in total (not counting excluded ones).
Applied 0 curation(s) from 0 of 4 provider(s).
Resolved issues: 0 errors, 0 warnings, 0 hints.
Unresolved issues: 0 errors, 0 warnings, 0 hints.

But there has go.mod under "/Users/mac/IdeaProjects/myproject". And I set ort.analyzer.enabledPackageManagers=[GoMod].

---- updated ----
It works when I add "go.mod" in includePath.

analyzer:
  skip_excluded: true
  enabled_package_managers:
    - GoMod
includes:
  paths:
    - pattern: "go.*"
      reason: "SOURCE_OF"
    - pattern: "pkg/**"
      reason: "SOURCE_OF"
    - pattern: "cmd/**"
      reason: "SOURCE_OF"

[LizZhang315]

Actually, https://git.sr.ht/~sbinet/gg works just fine for me.

@sschuberth Oh, but it doesn't works for me (T^T), so I will try to exclude it by package_curations.

[LizZhang315]

@sschuberth I have add curations in .ort.yml:

curations:
  packages:
    - id: "Go::git.sr.ht/~sbinet/gg@*"
      curations:
        is_metadata_only: true
        vcs:
          type: "Git"
          url: "https://github.com/fogleman/gg"

but it still has this error:

java.io.IOException: Running 'go list -m -json -buildvcs=false all' in '/Users/mac/IdeaProjects/myproject' failed with exit code 1:
go: downloading go1.24.0 (darwin/arm64)
go: unrecognized import path "git.sr.ht/~sbinet/gg": reading https://git.sr.ht/~sbinet/gg?go-get=1: 502 Bad Gateway
go: github.com/lyft/protoc-gen-validate@v0.0.13: invalid version: git ls-remote -q origin in /var/folders/1m/ppw_fx_d5tx6lt23x2wsrzl80000gp/T/ort-MapBuilder15371783685254727803/pkg/mod/cache/vcs/9fd09b25f1dfaa9e76964723b760e6eeccd6d24908ca51a76a83ac87d36a2c20: exit status 128:
        remote: Repository not found.
        fatal: repository 'https://github.com/lyft/protoc-gen-validate/' not found
go: github.com/go-kit/kit@v0.10.0 requires
        github.com/openzipkin/zipkin-go@v0.2.2 requires
        google.golang.org/grpc@v1.20.0 requires
        github.com/lyft/protoc-gen-validate@v0.0.13: reading github.com/lyft/protoc-gen-validate/go.mod at revision v0.0.13: git ls-remote -q origin in /var/folders/1m/ppw_fx_d5tx6lt23x2wsrzl80000gp/T/ort-MapBuilder15371783685254727803/pkg/mod/cache/vcs/9fd09b25f1dfaa9e76964723b760e6eeccd6d24908ca51a76a83ac87d36a2c20: exit status 128:
        remote: Repository not found.
        fatal: repository 'https://github.com/lyft/protoc-gen-validate/' not found

And also there has another error, ort will download module not exit, like "github.com/lyft/protoc-gen-validate", this module is dependent on the modules that our project relies on. Do I need to configured it in the curations to ignore it? But the GitHub address of this module is no longer accessible, will there still be an error when executing analyze？

[sschuberth]

Please read my above comment:

Well, I guess the source code of your project still points to git.sr.ht/~sbinet/gg instead of github.com/fogleman/gg. This is nothing that ORT's curations can account for.

This is not bug in ORT or an error in the ORT configuration, it's a problem in the project itself that needs to be fixed there.

[LizZhang315]

It is the indirect modules that import this module, I cannot modify it. I want to skip this error. So the curations still not work?

And this configuration also didn't work

- id: "Go::github.com/lyft/protoc-gen-validate:"
    curations:
      vcs:
        type: "Git"
        url: "https://github.com/bufbuild/protoc-gen-validate.git"

[sschuberth]

@fviernau, as Go package names essentially are VCS URLs, do you think we could already take VCS URL curation into account when calling go list -m -json -buildvcs=false all? Like catching exceptions during that call and retrying failed packages with curated data?

[sschuberth]

I want to skip this error. So the curations still not work?

The curation basically works, but it's not suitable to fix this kind of error at that early stage. I currently do not have a proposal how to fix this.

[LizZhang315]

I see, thanks for your help.

[sschuberth]

@LizZhang315, I've moved this to a discussion, as it seems to more usage help than an issue report.