aboutcode-org / aboutcode-org/scancode-toolkit

packagecode: gradle nebula dependency lock parser

未關閉
#2,761 6 則留言 1 個 reaction 已指派 0 人 在 GitHub 檢視
dependencies new feature package scan
主要語言
Python
星號
2.6k
分支
791
平均合併
1 天 12 小時
30 天內合併 PR
5

描述

## Short Description

gradle is a build tool for the ajva ecosystem especially popular in android apps.

nebula gradle dependency lock allows developer to lock their gradle dependencies and sub dependencies to specific versions
packagecode should be able to parse this simple information

## Possible Labels

- new feature
- package scan

## Select Category

- [ ] Enhancement
- [ ] Add License/Copyright
- [x] Scan Feature
- [ ] Packaging
- [ ] Documentation
- [ ] Expand Support
- [ ] Other

## **Describe the Update**

lock format is documented here:

https://github.com/nebula-plugins/gradle-dependency-lock-plugin/wiki/Usage#lock-file-format

It is a simple json format that clearly shows the packages and versions.
Should be quite easy to parse

## **How This Feature will help you/your organization**

This will have using scancode to extract our gradle dependencies.

## **Possible Solution/Implementation Details**

## **Example/Links if Any**

## **Can you help with this Feature**

Renault will probably contribute this feature in the next month

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。