aboutcode-org / aboutcode-org/dependency-inspector

Extend Lockfile checker and generator

Offen
#13 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Go
Sterne
2
Forks
3
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

As a follow up to:
- https://github.com/nexB/dependency-inspector/issues/2

Here are the next candidates:

- Java:
- [ ] Maven https://github.com/nexB/dependency-inspector/issues/6
- See also https://github.com/search?q=maven+dependency+tree&type=repositories
- Note that the `mvn dependency:tree` command would typically process all pom.xml in the codebase at once, and would generate one tree for each each pom.xml
- a good set of args to run the command would be : `mvn dependency:tree -DoutputFile=maven-dependency-tree.lock -DoutputType=graphml` and optionally with`-Dmaven.test.skip=true` and `-DskipTests` to skip tests, or various other options (such as scope) to filter the tree. See https://maven.apache.org/plugins/maven-dependency-plugin/tree-mojo.html
- [ ] Gradle https://github.com/nexB/dependency-inspector/issues/9
- See https://docs.gradle.org/current/userguide/dependency_locking.html
- https://github.com/GeekMasher/gradle-lock-dependency-submission-action
- Other:
- [ ] Create composer lock file with `composer`
- [ ] Create Ruby lock file with `bundler`
- [ ] Create go.sum lock file with `go` (though this should be standard by now)
- [ ] Create cargo/Rust lock file
- [ ] Create Dart/pub lockfile

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.