chore: update comments and timeout

Signed-off-by: Mouad BANI <mouad-mb@outlook.com>

Author: mbani01

backend/src/api/public/v1/packages/getPackage.ts

@@ -61,6 +61,10 @@ export async function getPackage(req: Request, res: Response): Promise<void> {
         workflowId: ondemandWorkflowId(purl),
         workflowIdReusePolicy: WorkflowIdReusePolicy.ALLOW_DUPLICATE,
         workflowIdConflictPolicy: WorkflowIdConflictPolicy.USE_EXISTING,
+        // Bounds the request's wait if packages-worker is down or its task queue is
+        // backed up — the activity's startToCloseTimeout only starts counting once a
+        // worker picks the task up, so without this the request could hang indefinitely.
+        workflowExecutionTimeout: '60 seconds',
         args: [purl],
       })
       pkg = (await getPackageDetailByPurl(qx, purl)) ?? pkg

services/apps/packages_worker/src/security-contacts/ingestSingle.ts

@@ -32,9 +32,9 @@ interface SingleRepoRow {
 // the shape the batch sweep builds.
 //
 // No host filter: processRepo already degrades gracefully for non-github repos (the
-// github-specific extractors no-op, security.txt/registry-manifest extractors still run)
-// and always stamps contacts_last_refreshed — filtering here would leave non-github repos
-// permanently NULL, re-triggering this on-demand path on every single request.
+// github-specific extractors no-op, security.txt/registry-manifest extractors still run) —
+// filtering here would leave non-github repos permanently NULL, re-triggering this
+// on-demand path on every single request.
 async function findBestRepoForPurl(qx: QueryExecutor, purl: string): Promise<SingleRepoRow | null> {
   return qx.selectOneOrNone(
     `
@@ -76,7 +76,7 @@ function toTarget(row: SingleRepoRow): RepoTarget {
 /**
  * On-demand ingest for a single purl, bypassing the daily critical-only sweep.
  * Used when the akrites API hits a repo that has never been evaluated
- * (repos.contacts_last_refreshed IS NULL) — see security-contacts.md.
+ * (repos.contacts_last_refreshed IS NULL).
  */
 export async function ingestSecurityContactsForPurl(
   qx: QueryExecutor,