dependabot / dependabot/dependabot-core
Support Unity UPM packages
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 155
Description
The unity ecosystem is slowly moving towards package management with its [UPM (Unity Package Manager)](https://docs.unity3d.com/Manual/Packages.html) format. Even tough the asset store does not yet fully support them, git repositories are supported, and there are also community driven UPM repositories which are getting more and more tracksion (for example https://openupm.com). Also NuGet packages can be installed via the [Xoofx UnityNuGet](https://github.com/xoofx/UnityNuGet/) UPM server project.
Getting dependabot support would be a huge plus. On the technical side I suppose it would not require too much work, since UPM is mostly just a rebranding of NPM.
Contributor guide
Research direction
Start with the linked Unity Package Manager documentation, then compare the package format with the NPM relationship described in the issue. Review how Dependabot would discover packages from git repositories, OpenUPM, or UnityNuGet, and define the supported update behavior and completion criteria before implementation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- unity
- Domain
- devtools, game-dev
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100