Analyzer: Remove projects that are also dependencies

Local directories that are dependencies can appear in the
analyzer results both as packages, e.g. Pub, and projects.
After building the results, projects are removed if they match
with packages on VCS information and package manager type.

This is caused by issue oss-review-toolkit#5365. This is only a workaround which
should be replaced by a comprehensive solution for oss-review-toolkit#5365.

analyzer/src/main/kotlin/Analyzer.kt

@@ -161,6 +161,7 @@ class Analyzer(private val config: AnalyzerConfiguration, private val labels: Ma
             }
         }
 
+        analyzerResultBuilder.deduplicateProjects()
         return state.buildResult()
     }
 }

analyzer/src/main/kotlin/AnalyzerResultBuilder.kt

@@ -107,4 +107,30 @@ class AnalyzerResultBuilder(private val curationProvider: PackageCurationProvide
         dependencyGraphs[packageManagerName] = graph
         return this
     }
+
+    fun deduplicateProjects() {
+        val packages = this.packages.filter { p ->
+            p.pkg.vcsProcessed.path != ""
+        }
+        val duplicatedProjects = this.projects.filter { prj ->
+            prj.vcsProcessed.path != ""
+        }.filter { prj ->
+            val matchingPackages = packages.filter { p ->
+                prj.id.type == p.pkg.id.type &&
+                prj.vcsProcessed == p.pkg.vcsProcessed
+            }
+            if (matchingPackages.size > 0) {
+                matchingPackages.map { p ->
+                    log.warn {
+                        "Project ${prj.id.type}:${prj.id.namespace}:${prj.id.name} " +
+                        "resembles package ${p.pkg.id.type}:${p.pkg.id.namespace}:${p.pkg.id.name}"
+                    }
+                }
+            }
+            matchingPackages.size != 0
+        }
+        duplicatedProjects.map { prj ->
+            this.projects.remove(prj)
+        }
+    }
 }