Fix bugs in scorecard

src/scorecard.ts

@@ -3,14 +3,23 @@ import {isSPDXValid, octokitClient} from './utils'
 import {PackageURL} from 'packageurl-js'
 import * as core from '@actions/core'
 
-export async function getScorecardLevels(changes: Change[]): Promise<any> {
+export async function getScorecardLevels(changes: Change[]): Promise<object> {
+  const data: any = {dependencies: []}
   for (const change of changes) {
     const purl = PackageURL.fromString(change.package_url)
     const ecosystem = purl.type
     const packageName = purl.name
     const version = purl.version
-    return getDepsDevData(ecosystem, packageName, String(version))
+
+    data.dependencies.push({
+      purl: purl,
+      ecosystem: ecosystem,
+      packageName: packageName,
+      version: version,
+      depsDevData: await getDepsDevData(ecosystem, packageName, version)
+    })
   }
+  return data;
 }
 
 const depsDevAPIRoot = 'https://api.deps.dev'
@@ -18,8 +27,8 @@ const depsDevAPIRoot = 'https://api.deps.dev'
 async function getDepsDevData(
   ecosystem: String,
   packageName: String,
-  version: String
-): Promise<any> {
+  version: any
+): Promise<object> {
   try {
     core.debug(`Getting deps.dev data for ${packageName} ${version}`)
     const url = `${depsDevAPIRoot}//v3alpha/systems/${ecosystem}/packages/${packageName}/versions/${version}`
@@ -28,7 +37,7 @@ async function getDepsDevData(
       const data = await response.json()
       const projects = data.relatedProjects
       for (const project of projects) {
-        return getDepsDevProjectData(project.projectKey)
+        return await getDepsDevProjectData(project.projectKey)
       }
     } else {
       throw new Error(`Failed to fetch data with status code: ${response.status}`)
@@ -36,6 +45,7 @@ async function getDepsDevData(
   } catch (error: any) {
     core.error(`Error fetching data: ${error.message}`)
   }
+  return {}
 }
 
 async function getDepsDevProjectData(