Package reference objects are used to collect metadata pertaining to a given
package. As data is needed for assessing a package's risk, this metadata
populates fields within the package reference object.
The pkg_ref S3 subclasses are used extensively for divergent metadata
collection behaviors dependent on where the package was discovered. Because
of this, there is a rich hierarchy of subclasses to articulate the different
ways package information can be found.
A source argument can be passed using the `source` argument. This will
override the logic that riskmetric does when determining a package source.
This can be useful when you are scoring the most recent version present on a
repository, or testing a specific library.
pkg_ref
A default class for general metadata
collection.
pkg_cran_remote
A reference to package
information pulled from the CRAN repository.
pkg_bioc_remote
A reference to package
information pulled from the Bioconductor repository.
pkg_git_remote
A reference to a package source
code git repository. (not yet implemented)