feat: Add support for pip cache origin files

CHANGELOG.rst

@@ -4,6 +4,12 @@ Changelog
 Next release
 --------------
 
+- Add support for parsing pip cache directories. ScanCode now detects
+  ``.cache/pip/wheels/`` directories and parses ``origin.json`` files
+  to collect cached Python packages with their name, version, and
+  SHA-256 hashes.
+  https://github.com/aboutcode-org/scancode-toolkit/issues/4220
+
 - Fix the optional ``licenses`` extra dependency typo to install
   ``licensedcode-data``.
   https://github.com/aboutcode-org/scancode-toolkit/pull/5056

pyproject-scancode-toolkit-mini.toml

@@ -56,6 +56,7 @@ dependencies = [
     "click >= 6.7, !=7.0, !=8.1.8;python_version<'3.10'",
     "click >= 8.2.0;python_version>='3.10'",
     "colorama >= 0.3.9",
+    "commoncode >= 32.4.2",
     "cyseq >= 0.1.2",
     "container-inspector >= 31.0.0",
     "debian-inspector >= 31.1.0",

pyproject-scancode-toolkit.toml

@@ -56,6 +56,7 @@ dependencies = [
     "click >= 6.7, !=7.0, !=8.1.8;python_version<'3.10'",
     "click >= 8.2.0;python_version>='3.10'",
     "colorama >= 0.3.9",
+    "commoncode >= 32.4.2",
     "cyseq >= 0.1.2",
     "container-inspector >= 31.0.0",
     "debian-inspector >= 31.1.0",

pyproject.toml

@@ -57,6 +57,7 @@ dependencies = [
     "click >= 6.7, !=7.0, !=8.1.8;python_version<'3.10'",
     "click >= 8.2.0;python_version>='3.10'",
     "colorama >= 0.3.9",
+    "commoncode >= 32.4.2",
     "cyseq >= 0.1.2",
     "container-inspector >= 31.0.0",
     "debian-inspector >= 31.1.0",

requirements.txt

@@ -10,6 +10,7 @@ cffi==2.0.0
 chardet==5.2.0
 charset-normalizer==3.4.4
 click==8.3.1
+commoncode==32.5.2
 colorama==0.4.6
 construct==2.10.70
 container-inspector==33.0.0

src/packagedcode/__init__.py

@@ -167,6 +167,7 @@
 
     pypi.PipfileHandler,
     pypi.PipfileLockHandler,
+    pypi.PipCacheOriginHandler,
     pypi.PipRequirementsFileHandler,
     pypi.PypiEggHandler,
     # pypi.PypiSdistArchiveHandler,