aboutcode-org / aboutcode-org/scancode-toolkit
packagecode: gradle nebula dependency lock parser
- 主要语言
- Python
- 星标
- 2.6k
- 派生
- 791
- 平均合并
- 1 天 12 小时
- 30 天内合并 PR
- 5
描述
## Short Description
gradle is a build tool for the ajva ecosystem especially popular in android apps.
nebula gradle dependency lock allows developer to lock their gradle dependencies and sub dependencies to specific versions
packagecode should be able to parse this simple information
## Possible Labels
- new feature
- package scan
## Select Category
- [ ] Enhancement
- [ ] Add License/Copyright
- [x] Scan Feature
- [ ] Packaging
- [ ] Documentation
- [ ] Expand Support
- [ ] Other
## **Describe the Update**
lock format is documented here:
https://github.com/nebula-plugins/gradle-dependency-lock-plugin/wiki/Usage#lock-file-format
It is a simple json format that clearly shows the packages and versions.
Should be quite easy to parse
## **How This Feature will help you/your organization**
This will have using scancode to extract our gradle dependencies.
## **Possible Solution/Implementation Details**
## **Example/Links if Any**
## **Can you help with this Feature**
Renault will probably contribute this feature in the next month
贡献指南
评估
这个 Issue 还没有评估数据。