Remove hash_options from requirement to avoid packvers parsing issues

The compatibility check is already ignoring the `hash_options` [1],
while a `Requirement` is still constructed in [2] and [3].
This causes the application to crash and fail to create a result.
Remove the `hash_options` for now until
`packvers.requirements.Requirement` supports this option.

[1]: https://github.com/aboutcode-org/python-inspector/blob/3ad3925840e8dad16ad12b3917f04ec3172590ad/src/_packagedcode/pypi.py#L999
[2]: https://github.com/aboutcode-org/python-inspector/blob/3ad3925840e8dad16ad12b3917f04ec3172590ad/src/python_inspector/api.py#L484
[3]: https://github.com/aboutcode-org/python-inspector/blob/3ad3925840e8dad16ad12b3917f04ec3172590ad/src/python_inspector/resolution.py#L259

Related to #243.

Signed-off-by: Marcel Bochtler <[email protected]>

Author: MarcelBochtler

src/_packagedcode/pypi.py

@@ -534,7 +534,7 @@ def parse(cls, location):
                     for metapath in path.iterdir():
                         if not metapath.name.endswith('METADATA'):
                             continue
-    
+
                         yield parse_metadata(
                             location=metapath,
                             datasource_id=cls.datasource_id,
@@ -945,6 +945,8 @@ def get_requirements_txt_dependencies(location, include_nested=False):
 
         purl = purl and purl.to_string() or None
 
+        hash_options = req.hash_options or []
+        req.hash_options = []
         requirement = req.dumps()
 
         if location.endswith(
@@ -973,7 +975,7 @@ def get_requirements_txt_dependencies(location, include_nested=False):
                 extra_data=dict(
                     is_editable=req.is_editable,
                     link=req.link and req.link.url or None,
-                    hash_options=req.hash_options or [],
+                    hash_options=hash_options,
                     is_constraint=req.is_constraint,
                     is_archive=req.is_archive,
                     is_wheel=req.is_wheel,

tests/data/hash-requirements.txt

@@ -0,0 +1,7 @@
+addict==2.4.0 \
+    --hash=sha256:249bb56bbfd3cdc2a004ea0ff4c2b6ddc84d53bc2194761636eb314d5cfa5dfc \
+    --hash=sha256:b3b2210e0e067a281f5646c8c5db92e99b7231ea8b0eb5f74dbdf9e259d4e494
+
+requests==2.25.1 \
+    --hash=sha256:c210084e36a42ae6b9219e00e48287def368a26d03a048ddad7bfee44f75871e \
+    --hash=sha256:27973dd4a904a4f13b263a19c866c13b92a39ed1c964655f025f3f8d3d75b804