dependabot / dependabot/dependabot-core

Support Unity UPM packages

Open
#4,589 3 comments 60 reactions 0 assignees View on GitHub
Keep T: feature-request T: new-ecosystem
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
155

Description

The unity ecosystem is slowly moving towards package management with its [UPM (Unity Package Manager)](https://docs.unity3d.com/Manual/Packages.html) format. Even tough the asset store does not yet fully support them, git repositories are supported, and there are also community driven UPM repositories which are getting more and more tracksion (for example https://openupm.com). Also NuGet packages can be installed via the [Xoofx UnityNuGet](https://github.com/xoofx/UnityNuGet/) UPM server project.

Getting dependabot support would be a huge plus. On the technical side I suppose it would not require too much work, since UPM is mostly just a rebranding of NPM.

Contributor guide

Open the contributing guide

Research direction

Start with the linked Unity Package Manager documentation, then compare the package format with the NPM relationship described in the issue. Review how Dependabot would discover packages from git repositories, OpenUPM, or UnityNuGet, and define the supported update behavior and completion criteria before implementation.

Written by the indexing model from the issue text.

Assessment

Tech stack
unity
Domain
devtools, game-dev
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.