dependabot / dependabot/dependabot-core
Support PDM: https://github.com/frostming/pdm
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
I'd like to get Dependabot support for Python projects managed by [PDM](https://github.com/frostming/pdm).
PDM is very similar in usage to Poetry, and also uses `pyproject.toml`, so it could be in conflict with the Poetry file updater 😕
It also has its own `pdm.lock` file.
Just opening for visibility, to see if others are interested 🙂
Contributor guide
Research direction
Start by comparing the existing Poetry file updater with PDM's pyproject.toml and pdm.lock files, as described in the issue. Check how the current updater detects Poetry projects and handles lockfiles; done means Dependabot recognizes PDM projects, avoids conflicting with Poetry support, and updates pdm.lock correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100