microsoft/component-detection

View on GitHub

Scans your project to determine what components you use

Stars: 553
Forks: 135
Open beginner issues: 0
Indexed issues: 111
Avg merge: 20h 58m
Merged PRs (30d): 6

Dominant language: C#
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

111 open issues indexed

Detect app-centric/"general purpose" package managers Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/component-detection#1214 · Opened Jul 30, 2024
Nuget Detection: Nuspec Version as Variable $version$ (Dynamic Versioning) Open

detector:nuget type:feature

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1191 · 1 comment · 3 reactions · Opened Jul 5, 2024
Investigate usage of `--use-feature=fast-deps` in `pip install --report` Open

detector:pip status:blocked type:feature

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1182 · 1 comment · Opened Jun 18, 2024
Investigate `--no-compile` with PipReport detector Open

detector:pip good first issue status:ready type:refactor

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#1149 · 1 comment · Opened Jun 4, 2024
Request: Add support for Python Pipenv to read packages from Pipfile/Pipfile.lock Open

detector:pip status:requirements type:feature

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/component-detection#1143 · 1 comment · Opened May 29, 2024
Standardize detector failure reporting and exception handling Open

.NET breaking change type:refactor

microsoft/component-detection#1134 · 1 assignee · Opened May 23, 2024
Feature Request: NuGet packages.lock.json lock file detector Open

.NET status:requirements type:feature

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#1089 · 1 comment · 3 reactions · Opened Apr 26, 2024
Request: add support for VB6 Open

.NET status:requirements type:feature

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/component-detection#1088 · 3 comments · 2 reactions · Opened Apr 26, 2024
Add osv-scanner.toml configuration to verification tests folders Open

good first issue status:ready type:ci type:tests

Difficulty 4/5 3-5 days Newbie friendliness 62/100

microsoft/component-detection#1073 · 1 comment · Opened Apr 18, 2024
No Detector for Scala's SBT (Simple Build Tool) Open

detector:maven status:requirements type:feature

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/component-detection#1057 · 4 comments · 1 reaction · Opened Apr 8, 2024
package detector warning Open

detector:pip status:waiting-on-response type:bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/component-detection#1043 · 1 comment · Opened Mar 21, 2024
Why are NuGet project references not included? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#1029 · 6 comments · 6 reactions · Opened Mar 13, 2024
Rust: allow specific features to be set for RustCLI detector Open

detector:rust type:feature

microsoft/component-detection#1001 · 1 assignee · Opened Feb 1, 2024
Investigate new method of determining Poetry development dependencies Open

detector:poetry status:requirements type:feature

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/component-detection#996 · Opened Feb 1, 2024
Add composer.json as source for component detection Open

status:requirements type:feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#977 · 3 comments · 1 reaction · Opened Jan 18, 2024
Incorrect and duplicate versions detected of a component in the same project file when using central package management (NuGet) Open

detector:nuget status:waiting-on-response type:bug

microsoft/component-detection#970 · 2 comments · 1 assignee · Opened Jan 15, 2024
Python: Handle multiple dependency specifiers for the same package Open

detector:pip status:requirements type:refactor

microsoft/component-detection#963 · 3 comments · 1 assignee · Opened Jan 11, 2024
Publish as a .NET tool? Open

.NET status:requirements type:feature version:minor

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/component-detection#908 · 1 comment · 1 reaction · Opened Nov 16, 2023
Feature Request - Add support for LibMan manifest (libman.json) Open

status:requirements type:feature

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#859 · 3 comments · Opened Oct 16, 2023
Component paths being duplicated and containing "/.." in detected components Open

.NET status:waiting-on-response type:bug version:minor

microsoft/component-detection#824 · 2 comments · 1 assignee · Opened Oct 2, 2023
Wrong pip dependency version detection Open

detector:pip type:bug

microsoft/component-detection#789 · 3 comments · 1 assignee · Opened Sep 18, 2023
Remove Observables and switch to Channels Open

type:refactor

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/component-detection#772 · 1 reaction · Opened Sep 6, 2023
Add smoke test for conan Open

status:ready type:tests

Difficulty 1/5 Under an hour Newbie friendliness 45/100

microsoft/component-detection#762 · 2 comments · 1 reaction · Opened Sep 1, 2023
Change python detectors cache implementation Open

detector:pip type:refactor

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#731 · 2 comments · Opened Aug 20, 2023
Migrate away from Moq Open

good first issue status:ready type:tests

Difficulty 4/5 3-5 days Newbie friendliness 28/100

microsoft/component-detection#709 · 3 reactions · Opened Aug 9, 2023
Component detection does not scan Linux file system if the image is not a docker image. Open

detector:linux status:requirements type:feature

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/component-detection#691 · 3 comments · Opened Aug 2, 2023
Create Configuration file + JSON Schema for Options Open

status:ready type:feature

microsoft/component-detection#671 · 1 reaction · 1 assignee · Opened Jul 25, 2023
Add detector for CycloneDX SBOMs Open

type:feature

Difficulty 3/5 1-2 days Newbie friendliness 55/100

microsoft/component-detection#669 · Opened Jul 20, 2023
Support for almalinux as a Linux distribution Open

detector:linux type:bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/component-detection#655 · 1 comment · Opened Jul 12, 2023
Sign Component Detection GitHub releases Open

status:requirements type:ci

microsoft/component-detection#653 · 1 comment · 1 assignee · Opened Jul 12, 2023
Add `FluentAssertions.Analyzers` and fix all warnings Open

good first issue type:refactor

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#633 · 1 comment · 1 reaction · Opened Jun 29, 2023
Implement Manifest Parser for OpenSSF GUAC Open

status:requirements type:feature

Difficulty 5/5 Over a week Newbie friendliness 30/100

microsoft/component-detection#606 · 1 reaction · Opened Jun 14, 2023
Nuget "project centric detector" should not filter out dependencies Open

breaking change detector:nuget status:requirements type:bug

microsoft/component-detection#502 · 1 comment · 1 assignee · Opened Apr 11, 2023
Add Support for ".pom" file parsing in Maven ecosystem Open

detector:maven status:requirements

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#471 · Opened Mar 10, 2023
Introduce nullable reference types Open

status:requirements type:refactor

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/component-detection#464 · Opened Mar 7, 2023
Use `sealed` where possible Open

status:ready type:refactor

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#456 · Opened Mar 2, 2023
Allow internal artifact feed configuration in pip detector Open

detector:pip status:in-progress type:bug

microsoft/component-detection#415 · 1 comment · 1 assignee · Opened Jan 30, 2023
Investigate performance of `PipComponentDetector` Open

detector:pip status:requirements type:refactor

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#373 · 2 comments · Opened Nov 23, 2022
Review Poetry detector tests Open

detector:poetry status:ready type:bug

Difficulty 3/5 1-2 days Newbie friendliness 38/100

microsoft/component-detection#304 · Opened Oct 17, 2022
Component detection for pip does not read constraints.txt file Open

detector:pip status:requirements type:feature

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#280 · Opened Sep 28, 2022
Remove references to BCDE Open

breaking change status:requirements type:refactor version:major

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

microsoft/component-detection#251 · Opened Aug 31, 2022
Python: Component-governance extraction from setup.py does not include setup.cfg/pyproject.toml if executed from different dir. Open

detector:pip status:requirements type:feature

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/component-detection#244 · Opened Aug 30, 2022
Python: add support for pyproject.toml (pep621) and perhaps setup.cfg specifications of dependencies Open

status:requirements type:feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/component-detection#243 · 2 comments · 8 reactions · Opened Aug 30, 2022
Python: Dependencies are looked up from incorrect urls Open

detector:pip status:requirements type:bug

microsoft/component-detection#241 · 3 comments · 1 assignee · Opened Aug 30, 2022
Use single shared `ActionBlock` Open

status:requirements type:refactor

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/component-detection#235 · Opened Aug 26, 2022
Migrate from `Newtonsoft.Json` to `System.Text.Json` Open

status:ready type:refactor

Difficulty 5/5 Over a week Newbie friendliness 20/100

microsoft/component-detection#231 · 3 comments · Opened Aug 26, 2022
Fix analyzer warnings Open

good first issue status:in-progress type:refactor

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/component-detection#202 · 1 comment · Opened Aug 16, 2022
ability to configure that all packages detected in a file our development dependencies Open

status:requirements type:feature

Difficulty 5/5 Over a week Newbie friendliness 28/100

microsoft/component-detection#198 · 1 comment · Opened Aug 11, 2022
Suggestion: only detect NPM modules under node_modules directory Open

detector:npm status:requirements

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/component-detection#190 · Opened Aug 8, 2022
Dependency Dashboard Open

dependencies

Difficulty 4/5 3-5 days Newbie friendliness 20/100

microsoft/component-detection#139 · Opened Jun 29, 2022

microsoft/component-detection

Get new issues in your inbox