Handle multiple discoveredpackages with the same PURL

Signed-off-by: Keshav Priyadarshi <git@keshav.space>

Author: keshav-space

scanpipe/pipes/d2d.py

@@ -29,7 +29,6 @@
 from scanpipe import pipes
 from scanpipe.models import CodebaseRelation
 from scanpipe.models import CodebaseResource
-from scanpipe.models import DiscoveredPackage
 from scanpipe.pipes import flag
 from scanpipe.pipes import get_resource_diff_ratio
 from scanpipe.pipes import js
@@ -913,16 +912,16 @@ def _map_javascript_npm_lookup_resource(
     if not matched:
         return 0
 
-    try:
-        package = project.discoveredpackages.get(
-            type=purl.type,
-            namespace="" if not purl.namespace else purl.namespace,
-            name=purl.name,
-            version=purl.version,
-        )
-        package.add_resources(matched)
+    package = project.discoveredpackages.filter(
+        type=purl.type,
+        namespace="" if not purl.namespace else purl.namespace,
+        name=purl.name,
+        version=purl.version,
+    ).first()
 
-    except DiscoveredPackage.DoesNotExist:
+    if package:
+        package.add_resources(matched)
+    else:
         if results := purldb.fetch_package(purl=str(purl)):
             package_data = results[0]
             package_data.pop("uuid", None)