package scan requirement value confused

[xu1119]

Description

When trying to scan the project https://github.com/pallets/flask with latest scancode
The file is: https://github.com/pallets/flask/blob/main/examples/javascript/setup.cfg
It get the following result:
value of requirement in dependencies is confused, whether the key requirement means dependency version requirement?

"files": [
    {
      "path": "setup.cfg",
      "type": "file",
      "packages": [
        {
          "type": "pypi",
          "namespace": null,
          "name": null,
          "version": null,
          "qualifiers": {},
          "subpath": null,
          "primary_language": "Python",
          "description": null,
          "release_date": null,
          "parties": [],
          "keywords": [],
          "homepage_url": null,
          "download_url": null,
          "size": null,
          "sha1": null,
          "md5": null,
          "sha256": null,
          "sha512": null,
          "bug_tracking_url": null,
          "code_view_url": null,
          "vcs_url": null,
          "copyright": null,
          "license_expression": null,
          "declared_license": null,
          "notice_text": null,
          "root_path": null,
          "dependencies": [
            {
              "purl": "pkg:pypi/flask",
              "requirement": "Flask",
              "scope": "install",
              "is_runtime": true,
              "is_optional": false,
              "is_resolved": false
            },
            {
              "purl": "pkg:pypi/pytest",
              "requirement": "pytest",
              "scope": "install",
              "is_runtime": true,
              "is_optional": false,
              "is_resolved": false
            },
            {
              "purl": "pkg:pypi/blinker",
              "requirement": "blinker",
              "scope": "install",
              "is_runtime": true,
              "is_optional": false,
              "is_resolved": false
            }
          ],
          "contains_source_code": null,
          "source_packages": [],
          "extra_data": {},
          "purl": null,
          "repository_homepage_url": null,
          "repository_download_url": null,
          "api_data_url": null
        }
      ],
      "scan_errors": []
    }

How To Reproduce

scancode -p --json-pp - setup.cfg

System configuration

• What OS are you running on? (Windows/MacOS/Linux)
  Ubuntu18.04
• What version of scancode-toolkit was used to generate the scan file?
  scancode-toolkit 30.1.0
• What installation method was used to install/run scancode? (pip/source download/other)
  pip
• Python version
  Python 3.7.10

[pombredanne]

@xu1119 Sorry for the late reply!
The requirement field is supposed to be more the version spec than the name... though it should be also as much as much as possible the barebone content (so Flask would be correct here)
This needs to be clarified for sure.
Note that this is going to evolve quickly with https://github.com/nexB/univers and package-url/purl-spec#139 that we should support soon enough