aboutcode-org / aboutcode-org/dependency-inspector

Extend Lockfile checker and generator

Đang mở
#13 0 bình luận 0 reaction 0 người được giao Xem trên GitHub
Ngôn ngữ chính
Go
Star
2
Fork
3
Chỉ số merge pull request
Không có pull request nào được merge trong 30 ngày

Mô tả

As a follow up to:
- https://github.com/nexB/dependency-inspector/issues/2

Here are the next candidates:

- Java:
- [ ] Maven https://github.com/nexB/dependency-inspector/issues/6
- See also https://github.com/search?q=maven+dependency+tree&type=repositories
- Note that the `mvn dependency:tree` command would typically process all pom.xml in the codebase at once, and would generate one tree for each each pom.xml
- a good set of args to run the command would be : `mvn dependency:tree -DoutputFile=maven-dependency-tree.lock -DoutputType=graphml` and optionally with`-Dmaven.test.skip=true` and `-DskipTests` to skip tests, or various other options (such as scope) to filter the tree. See https://maven.apache.org/plugins/maven-dependency-plugin/tree-mojo.html
- [ ] Gradle https://github.com/nexB/dependency-inspector/issues/9
- See https://docs.gradle.org/current/userguide/dependency_locking.html
- https://github.com/GeekMasher/gradle-lock-dependency-submission-action
- Other:
- [ ] Create composer lock file with `composer`
- [ ] Create Ruby lock file with `bundler`
- [ ] Create go.sum lock file with `go` (though this should be standard by now)
- [ ] Create cargo/Rust lock file
- [ ] Create Dart/pub lockfile

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.