FOSSLight Dependency Scanner
💡 Introduction
This is the tool that supports the analysis of dependencies for multiple package managers. It detects the manifest file of package managers automatically and analyzes the dependencies with using open source tools. Then, it generates the report file that contains OSS information of dependencies.
📖 User Guide
We describe the user guide in the FOSSLight Guide page. In this user guide, you can see how to install the FOSSLight Dependency Scanner and how to set up the prerequisite step and run it according to the package manager of your project. Also, you can check the results of the FOSSLight Dependency Scanner.
👀 Package Support Level
| Language/ Project |
Package Manager | Manifest file | Direct dependencies | Transitive dependencies | Relationship of dependencies (Dependencies of each dependency) |
|---|---|---|---|---|---|
| Javascript | Npm | package.json | O | O | O |
| Pnpm | pnpm-lock.yaml | O | O | O | |
| Yarn | package.json | O | O | O | |
| Java | Gradle | build.gradle | O | O | O |
| Maven | pom.xml | O | O | O | |
| Java (Android) | Gradle | build.gradle | O | O | O |
| ObjC, Swift (iOS) | Cocoapods | Podfile.lock | O | O | O |
| Carthage | Cartfile.resolved | O | O | X | |
| Swift (iOS) | Swift | Package.resolved | O | O | O |
| Dart, Flutter | Pub | pubspec.yaml | O | O | O |
| Go | Go | go.mod | O | O | O |
| Python | Pypi | requirements.txt, setup.py, pyproject.toml | O | O | O |
| .NET | Nuget | packages.config, obj/project.assets.json | O | O | O |
| Kubernetes | Helm | Chart.yaml | O | X | X |
| Unity | Unity | Library/PackageManager/ProjectCache | O | O | X |
| Rust | Cargo | Cargo.toml | O | O | O |
📝 How to report issue
Please report any ideas or bugs to improve by creating an issue in Git Repository. Then there will be quick bug fixes and upgrades. Ideas to improve are always welcome.
👏 Contributing Guide
We always welcome your contributions. Please see the CONTRIBUTING guide for how to contribute.
📄 License
Copyright (c) 2020 LG Electronics, Inc. FOSSLight Dependency Scanner is licensed under Apache-2.0, as found in the LICENSE file.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file fosslight_dependency-4.1.45.tar.gz.
File metadata
- Download URL: fosslight_dependency-4.1.45.tar.gz
- Upload date:
- Size: 80.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
61377c2ae89978212d82a69c424be6576c1bf4d22b7044c889a3c387034d6440
|
|
| MD5 |
23088a7cb7cb6d4cdb3e112be9b5ca61
|
|
| BLAKE2b-256 |
a094ac31de1bef19bf0a2a09e66386fe1578bf350f2d7fe36c9a32ebca76f4d7
|
File details
Details for the file fosslight_dependency-4.1.45-py3-none-any.whl.
File metadata
- Download URL: fosslight_dependency-4.1.45-py3-none-any.whl
- Upload date:
- Size: 105.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5c28c8c1c3160656538db4b64b74f1b3efa70be54b540dbee74cd8facb407510
|
|
| MD5 |
e7a147422e0741c69ae21d296466f8da
|
|
| BLAKE2b-256 |
030c5a65b2a98a9ef1c2d121da23ce2e8d35745df9e937d8cabc64e997828800
|
