microsoft/component-detection

View on GitHub

Scans your project to determine what components you use

Stars: 553
Forks: 135
Open beginner issues: 0
Indexed issues: 111
Avg merge: 20h 58m
Merged PRs (30d): 6

Dominant language: C#
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

111 open issues indexed

Go 1.17+ direct requirements are omitted from explicitlyReferencedComponentIds Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

microsoft/component-detection#1875 · Opened Sep 19, 2026
Vcpkg dependencies detected via vcpkg.spdx.json but not attributed to vcpkg.json (Explicitly Referenced is 0, despite valid manifest-info.json) Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

microsoft/component-detection#1865 · Opened Sep 14, 2026
[Bug]: pnpm detector rejects multi-document lockfiles Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

microsoft/component-detection#1864 · Opened Sep 12, 2026
Request: Add Gradle build-script dependency detection using the Gradle dependency engine Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/component-detection#1859 · Opened Aug 21, 2026
[Request] Detecting `go.work` files Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

microsoft/component-detection#1856 · Opened Aug 6, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 30/100

microsoft/component-detection#1848 · 1 comment · Opened Jul 15, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 25/100

microsoft/component-detection#1846 · Opened Jul 14, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1843 · Opened Jul 13, 2026
SVG icon Open

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

microsoft/component-detection#1834 · Opened Jun 28, 2026
Component-detection 7.1.2 fails to start on MacOS Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1815 · 1 reaction · Opened May 20, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1794 · Opened Apr 20, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1793 · Opened Apr 20, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/component-detection#1780 · Opened Apr 13, 2026
`NpmComponentDetector` unconditionally skips packages with `engines.vscode`, causing false negatives for products that ship built-in extensions Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

microsoft/component-detection#1772 · Opened Apr 8, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1765 · Opened Apr 6, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1764 · Opened Apr 6, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 38/100

microsoft/component-detection#1761 · Opened Apr 3, 2026
Service to centrally track and cleanup generated files in detectors Open

type:feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/component-detection#1758 · Opened Apr 2, 2026
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1750 · Opened Mar 30, 2026
Distro release is included in LinuxComponent.Id but not Purl Open

Difficulty 5/5 Over a week Newbie friendliness 42/100

microsoft/component-detection#1714 · 3 comments · Opened Mar 13, 2026
Ruby gem versions don't follow pure semantic versioning Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

microsoft/component-detection#1598 · Opened Dec 15, 2025
Root package issue when scanning uv repository Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1586 · Opened Dec 5, 2025
Ivy scan fails when ivy.jar is missing Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/component-detection#1573 · Opened Nov 26, 2025
Pnpm 6 Detector should also ignore `link:` versions in package dependencies Open

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

microsoft/component-detection#1555 · Opened Nov 22, 2025
locationsFoundAt specifies URL-encoded paths Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/component-detection#1476 · 1 reaction · Opened Oct 23, 2025
verification tests broken after charset-normalizer 3.4.4 published Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

microsoft/component-detection#1473 · Opened Oct 14, 2025
There is a bug when the tool calls Rust's Cargo Metadata command and there is a space in the path Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/component-detection#1467 · Opened Sep 19, 2025
Smoke Test Failure Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/component-detection#1458 · Opened Aug 6, 2025
Allow DefaultOff detectors to be used exclusively Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/component-detection#1457 · 1 reaction · Opened Aug 5, 2025
Smoke Test Failure Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 25/100

microsoft/component-detection#1455 · Opened Aug 1, 2025
DetectorCategories Argument Documentation Incorrect Open

microsoft/component-detection#1435 · 1 reaction · 1 assignee · Opened Jun 12, 2025
Stop releasing Microsoft.ComponentDetection nuget package Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/component-detection#1423 · 5 comments · Opened Jun 6, 2025
Tests fail on Windows Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

microsoft/component-detection#1411 · 2 comments · 1 reaction · Opened May 23, 2025
NpmComponentDetector doesnt detect dependencies Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1405 · Opened May 15, 2025
Fix support for Paket on .NET ecosystem Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

microsoft/component-detection#1404 · 2 comments · Opened May 12, 2025
Add support for `dotnet run` project metadata Open

detector:nuget

Difficulty 4/5 3-5 days Newbie friendliness 45/100

microsoft/component-detection#1383 · 1 reaction · Opened Apr 14, 2025
Npm package-lock.json components not detected if peer = true and dev = true Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/component-detection#1380 · Opened Mar 29, 2025
Support Maven plugin detection Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/component-detection#1376 · Opened Mar 20, 2025
pnpm detection exception Open

Difficulty 3/5 1-2 days Newbie friendliness 32/100

microsoft/component-detection#1373 · Opened Mar 18, 2025
Add uv package manager support Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#1372 · 7 comments · 6 reactions · Opened Mar 16, 2025
OtherComponent: license and copyright properties Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/component-detection#1370 · Opened Mar 14, 2025
Investigate if cargo dependencies of type 'build' should be considered dev dependencies Open

detector:rust

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/component-detection#1366 · Opened Mar 12, 2025
Allow Capabilities to ignore specific files in scan Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#1362 · Opened Feb 27, 2025
CondaLock: Stack overflow issue in github actions Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

microsoft/component-detection#1334 · 2 comments · Opened Dec 24, 2024
Poetry detector fails on specific use case due to multiple sources for a package being specified in poetry.lock file Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#1323 · Opened Dec 10, 2024
Non-existent filepaths reported in manifest.json Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1312 · Opened Nov 21, 2024
fix(linux): add logic to parse the upstream package name Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/component-detection#1286 · Opened Oct 28, 2024
Detection is getting hung up on macOS Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/component-detection#1258 · 3 comments · Opened Oct 2, 2024
Conan 2.0 support is missing Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1228 · Opened Aug 19, 2024
Go/GoWithReplace skipping over go.mod files in child directories Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

microsoft/component-detection#1218 · Opened Aug 2, 2024

microsoft/component-detection

Get new issues in your inbox