-
Notifications
You must be signed in to change notification settings - Fork 2.9k
Closed
Labels
help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.
Milestone
Description
Description
Parse uv.lock to identify dependencies (example).
TODO
- Add new parser.
-
uv.lockcontains dependencies for package - so parser should detect[]Packageand[]Dependency.(check the case when 2 packages with different versions are used (if possible) -
uv.lockcontains root package (e.g. https://github.com/astral-sh/uv/blob/312eeb8f573d36f6df658f85ecadc52799647bb3/scripts/benchmark/uv.lock#L27). Can we detect that this is root package (e.g. fromsourcefield)? - fill Relationship field.
-
- add new analyzer.
- If we can detect Root package from
uv.lockfile - we can use analyzer interface. If no - we need to use PostAnalyzer and detect root package frompyproject.tomlfile. - This is lock file, so we need to add it into TypeLockfiles (don't forget about
TypeLanguages)
- If we can detect Root package from
- add new type into purl package
- update driver for Python
- add unit and integration tests
- docs: update Python and overview pages
Discussed in #7647
DeD1rk, tyree731, jstriebel, TomasKoutek, DanilaCharushin and 5 more
Metadata
Metadata
Assignees
Labels
help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.
Type
Projects
Status
No status