An open API service for producing an overview of a list of open source projects.

https://github.com/cdxgen/cdxgen

bom cbom containers cyclonedx docker oci owasp package-url purl saasbom sbom sca software-bill-of-materials spdx spdx-sbom supply-chain

Score: 25.92692221651885

Last synced: about 1 hour ago
JSON representation

Repository metadata:

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server


Owner metadata:


GitHub Events

Total
Last Year

Committers metadata

Last synced: 8 days ago

Total Commits: 4,119
Total Committers: 140
Avg Commits per committer: 29.421
Development Distribution Score (DDS): 0.648

Commits in past year: 2,031
Committers in past year: 23
Avg Commits per committer in past year: 88.304
Development Distribution Score (DDS) in past year: 0.355

Name Email Commits
Prabhu Subramanian p****u@a****m 1450
renovate[bot] 2****] 1387
Prabhu Subramanian p****u@s****o 355
Roland Asmann m****0 331
Adam Setch a****h@o****m 159
Copilot 1****t 56
Steve Springett s****e@s****s 54
Aryan Rajoria 5****a 31
Caroline Russell c****e@a****v 19
Bandhan Majumder 1****r 16
Tyler Sullivan t****n@s****m 15
Erlend Oftedal e****d@o****o 10
Ajmal Kottilingal 9****b 9
Maxime Robert m****t@s****r 8
Bernhard Schleicher 1****e 8
Hubert Plociniczak h****k@g****m 6
Jan Kowalleck j****k@g****m 5
Florian Heubeck 4****k 5
Sebastian Voss 1****s 5
Joris van Eijden j****n@o****l 5
Craig Andrews c****s@i****m 4
Jacek Puchta j****a@d****m 4
Marco Ippolito m****4@g****m 4
Tim Messing 1****o 4
evgovch-tf e****a@t****m 4
robaliias 4****s 4
Roshan Kumar 5****9 4
Sergio y****1@q****m 3
Rui Chen r****i@c****v 3
Raine Nieminen r****n@i****m 3
and 110 more...

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 32
Total pull requests: 113
Average time to close issues: 2 days
Average time to close pull requests: 9 days
Total issue authors: 20
Total pull request authors: 10
Average comments per issue: 2.97
Average comments per pull request: 0.59
Merged pull request: 91
Bot issues: 0
Bot pull requests: 38

Past year issues: 32
Past year pull requests: 111
Past year average time to close issues: 2 days
Past year average time to close pull requests: 8 days
Past year issue authors: 20
Past year pull request authors: 10
Past year average comments per issue: 2.97
Past year average comments per pull request: 0.55
Past year merged pull request: 91
Past year bot issues: 0
Past year bot pull requests: 38

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/cdxgen/cdxgen

Top Issue Authors

  • AvKat (5)
  • cordahi (5)
  • prabhu (5)
  • vbjay (1)
  • dervoeti (1)
  • ffissore (1)
  • inta (1)
  • timocov (1)
  • tisonv (1)
  • ChristophMajcenAtXxxlutz (1)
  • marthinuskr (1)
  • haksungjang (1)
  • maithilpatel008 (1)
  • ertl (1)
  • visagansanthanam-unisys (1)

Top Pull Request Authors

  • prabhu (54)
  • renovate[bot] (38)
  • Copilot (12)
  • malice00 (3)
  • cmcpluk (1)
  • zeri-k (1)
  • inoovador (1)
  • evgovch-tf (1)
  • gschafra (1)
  • vveider (1)

Top Issue Labels

  • bug (6)
  • lang:dotnet (3)
  • ai-auto (2)
  • lang:node (2)
  • infra (2)
  • false-positives (1)
  • bun (1)
  • lang:ruby (1)
  • intg:dtrack (1)
  • compliance (1)
  • yarn (1)
  • scala (1)
  • formulation (1)
  • pnpm (1)

Top Pull Request Labels

  • ai-auto (40)
  • dependency (40)
  • bug (12)
  • lang:node (7)
  • lang:dotnet (7)
  • infra (6)
  • compliance (5)
  • ai-pair (5)
  • lang:python (5)
  • lang:container (4)
  • false-negatives (3)
  • evinse (3)
  • scala (3)
  • pnpm (3)
  • mode:cli (3)
  • yarn (3)
  • false-positives (3)
  • format:spdx (2)
  • lang:go (2)
  • obom (2)
  • build (2)
  • security (2)
  • possibly breaking (2)
  • pdm (2)
  • skill (1)
  • lang:deno (1)
  • lang:mcp (1)
  • lang:java (1)
  • vue (1)
  • runtime:deno (1)

Package metadata

proxy.golang.org: github.com/cdxgen/cdxgen

  • Homepage:
  • Documentation: https://pkg.go.dev/github.com/cdxgen/cdxgen#section-documentation
  • Licenses: apache-2.0
  • Latest release: v13.0.1+incompatible (published 10 days ago)
  • Last Synced: 2026-08-27T18:42:05.698Z (1 day ago)
  • Versions: 504
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent packages count: 4.609%
    • Average: 4.764%
    • Dependent repos count: 4.919%
npmjs.org: @cyclonedx/cdxgen

Creates CycloneDX Software Bill of Materials (SBOM) from source or container image

npmjs.org: @cdxgen/cdxgen

Creates CycloneDX Software Bill of Materials (SBOM) from source or container image

  • Homepage: http://github.com/cdxgen/cdxgen
  • Licenses: Apache-2.0
  • Latest release: 13.0.1 (published 10 days ago)
  • Last Synced: 2026-08-27T18:52:49.553Z (1 day ago)
  • Versions: 3
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 924 Last month
  • Rankings:
    • Downloads: 14.367%
    • Dependent repos count: 21.228%
    • Average: 22.062%
    • Dependent packages count: 30.593%
  • Maintainers (1)

Dependencies

.github/workflows/dockertests.yml actions
  • actions/checkout v3 composite
  • actions/setup-node v3 composite
  • actions/setup-python v4 composite
  • actions/upload-artifact v1 composite
.github/workflows/nodejs.yml actions
  • actions/checkout v3 composite
  • actions/setup-node v3 composite
  • actions/upload-artifact v2 composite
  • softprops/action-gh-release v1 composite
.github/workflows/npm-release.yml actions
  • actions/checkout v3 composite
  • actions/setup-node v3 composite
  • docker/build-push-action v3 composite
  • docker/login-action v2 composite
  • docker/metadata-action v4 composite
  • docker/setup-buildx-action v2 composite
  • docker/setup-qemu-action v2 composite
.github/workflows/python-atom-tests.yml actions
  • actions/checkout v3 composite
  • actions/setup-java v3 composite
  • coursier/cache-action v6 composite
.github/workflows/repotests.yml actions
  • actions/checkout v3 composite
  • actions/setup-node v3 composite
  • actions/upload-artifact v1 composite
  • olafurpg/setup-scala v11 composite
  • swift-actions/setup-swift v1 composite
contrib/dependency-track/docker-compose.yml docker
  • dependencytrack/apiserver latest
  • dependencytrack/frontend latest
  • ghcr.io/cyclonedx/cdxgen latest
contrib/requirements.txt pypi
  • jsonschema *
ci/Dockerfile docker
  • almalinux 9.2-minimal build
docker-compose.yml docker
test/Cargo.lock cargo
  • 223 dependencies
test/data/bower.json bower
test/data/project.clj clojars
test/data/docker-compose-cr.yml docker
  • crapi/crapi-community ${VERSION
  • crapi/crapi-identity ${VERSION
  • crapi/crapi-web ${VERSION
  • crapi/crapi-workshop ${VERSION
  • crapi/mailhog ${VERSION
  • mongo 4.4
  • postgres 14
test/data/docker-compose-mysql.yml docker
  • docker.io/bitnami/argo-cd 2
test/data/docker-compose-ng.yml docker
  • awesome/database latest
  • awesome/webapp latest
  • mongo latest
test/data/docker-compose.yml docker
  • docker.io/bitnami/mariadb 10.6
  • docker.io/bitnami/wordpress 6
test/gomod/go.mod go
  • github.com/aws/aws-sdk-go v1.38.47
  • github.com/spf13/cobra v1.0.0
  • github.com/spf13/viper v1.3.0
  • github.com/spf13/viper=>github.com/spf13/viper v1.0.2
  • google.golang.org/grpc v1.32.0
test/gomod/go.sum go
  • github.com/spf13/cobra v1.0.0
  • github.com/spf13/viper v1.0.2
  • github.com/stretchr/testify v1.6.1
  • google.golang.org/grpc v1.21.0
test/gopkg/Gopkg.lock go
  • cloud.google.com/go 775730d6e48254a2430366162cf6298e5368833c
  • contrib.go.opencensus.io/exporter/ocagent dcb33c7f3b7cfe67e8a2cea10207ede1b7c40764
  • github.com/Azure/azure-amqp-common-go b5ea4829bce0d96bc7b4d11bfc8ccd2afdf0ec4a
  • github.com/Azure/azure-event-hubs-go 95f9bc025a9462337f8087aa883bc9b35a1e693e
  • github.com/Azure/azure-pipeline-go 55fedc85a614dcd0e942a66f302ae3efb83d563c
  • github.com/Azure/azure-sdk-for-go 77258e94d84ea36012a72c0e0a1e2faa409c6396
  • github.com/Azure/azure-storage-blob-go 5152f14ace1c6db66bd9cb57840703a8358fa7bc
  • github.com/Azure/go-autorest f29a2eccaa178b367df0405778cd85e0af7b4225
  • github.com/census-instrumentation/opencensus-proto a105b96453fe85139acc07b68de48f2cbdd71249
  • github.com/denisenkom/go-mssqldb eb9f6a1743f30383c8168cc520ca5db1f744d6f4
  • github.com/dgrijalva/jwt-go 06ea1031745cb8b3dab3f6a236daf2b0aa468b7e
  • github.com/dimchansky/utfbom d2133a1ce379ef6fa992b0514a77146c60db9d1c
  • github.com/globalsign/mgo eeefdecb41b842af6dc652aaea4026e8403e62df
  • github.com/gobuffalo/envy 043cb4b8af871b49563291e32c66bb84378a60ac
  • github.com/golang/protobuf b5d812f8a3706043e23a9cd5babf2e5423744d30
  • github.com/grpc-ecosystem/grpc-gateway 8fd5fd9d19ce68183a6b0934519dfe7fe6269612
  • github.com/hashicorp/golang-lru 7087cb70de9f7a8bc0a10c375cb0d2280a8edf9c
  • github.com/joho/godotenv 23d116af351c84513e1946b527c88823e476be13
  • github.com/jpillora/backoff 8eab2debe79d12b7bd3d10653910df25fa9552ba
  • github.com/marstr/collection 43f1d00df9bf332cbf8d26c3eecd6c348e92f7b3
  • github.com/marstr/randname d5b0f288ab8cfdaa716502900e10405f123dc0cf
  • github.com/mitchellh/go-homedir af06845cf3004701891bf4fdb884bfe4920b3727
  • github.com/mitchellh/mapstructure 3536a929edddb9a5b34bd6861dc4a9647cb459fe
  • github.com/openzipkin/zipkin-go 1b5162aa314e6ccfcf83777bfb5218988c9e8283
  • github.com/pkg/errors ba968bfe8b2f7e042a574c888954fccecfa385b4
  • github.com/rogpeppe/go-internal 438578804ca6f31be148c27683afc419ce47c06e
  • github.com/satori/go.uuid f58768cc1a7a7e77a3bd49e98cdd21419399b6a3
  • go.opencensus.io 43463a80402d8447b7fce0d2c58edf1687ff0b58
  • golang.org/x/crypto 22d7a77e9e5f409e934ed268692e56707cd169e5
  • golang.org/x/net 018c4d40a106a7ae83689758294fcd8d23850745
  • golang.org/x/sync 112230192c580c3556b8cee6403af37a4fc5f28c
  • golang.org/x/sys c432e742b0af385916e013f6a34e9e73d139cf82
  • golang.org/x/text 342b2e1fbaa52c93f31447ad2c6abc048c63e475
  • google.golang.org/api 721295fe20d585ce7e948146f82188429d14da33
  • google.golang.org/genproto bb713bdc0e5239f2b68e560efbe1c701a6fe78f9
  • google.golang.org/grpc 25c4f928eaa6d96443009bd842389fb4fa48664e
  • pack.ag/amqp a69a1d51f8e7b55567f8d190a8fab04503a97735
test/data/mix.lock hex
test/pom.xml maven
  • javax.servlet:javax.servlet-api 3.1.0 provided
  • com.fasterxml.jackson.core:jackson-databind 2.8.7
  • commons-io:commons-io 2.5
  • javax.mail:mail 1.5.0-b01
  • net.lingala.zip4j:zip4j 1.3.2
  • org.apache.commons:commons-lang3 3.5
  • org.apache.httpcomponents:httpclient 4.3.4
  • org.apache.logging.log4j:log4j-core 2.10.0
  • org.jasypt:jasypt 1.9.2
  • org.zeroturnaround:zt-exec 1.9
  • org.junit.jupiter:junit-jupiter-api 5.4.0 test
  • org.junit.jupiter:junit-jupiter-engine 5.4.0 test
  • org.junit.platform:junit-platform-launcher 1.4.0 test
package.json npm
  • caxa ^3.0.1 development
  • docsify-cli ^4.4.4 development
  • eslint ^8.51.0 development
  • eslint-config-prettier ^9.0.0 development
  • eslint-plugin-prettier ^5.0.1 development
  • jest ^29.7.0 development
  • prettier 3.0.3 development
  • @babel/parser ^7.23.0
  • @babel/traverse ^7.23.0
  • @npmcli/arborist ^7.2.0
  • ajv ^8.12.0
  • ajv-formats ^2.1.1
  • cheerio ^1.0.0-rc.12
  • edn-data ^1.0.0
  • glob ^10.3.10
  • global-agent ^3.0.0
  • got ^13.0.0
  • iconv-lite ^0.6.3
  • js-yaml ^4.1.0
  • jws ^4.0.0
  • node-stream-zip ^1.15.0
  • packageurl-js 1.0.2
  • prettify-xml ^1.2.0
  • properties-reader ^2.3.0
  • semver ^7.5.3
  • ssri ^10.0.4
  • table ^6.8.1
  • tar ^6.2.0
  • uuid ^9.0.1
  • xml-js ^1.6.11
  • xmlbuilder ^15.1.1
  • yargs ^17.7.2
test/data/package-json/v1/package-lock.json npm
  • 771 dependencies
test/data/package-json/v1/package.json npm
  • @wordpress/babel-preset-default ^1.2.0 development
  • babel-core ^6.26.3 development
  • babel-eslint ^8.2.3 development
  • babel-loader ^7.1.4 development
  • classnames ^2.2.5 development
  • cross-env ^5.1.5 development
  • css-loader ^0.28.11 development
  • eslint ^4.19.1 development
  • extract-text-webpack-plugin ^3.0.2 development
  • node-sass ^4.9.0 development
  • postcss-loader ^2.1.5 development
  • raw-loader ^0.5.1 development
  • sass-loader ^6.0.7 development
  • style-loader ^0.19.1 development
  • webpack ^3.11.0 development
  • react 16.2.0
  • react-autosize-textarea 2.0.0
  • react-dom 16.2.0
  • react-sortable-hoc ^0.6.8
test/data/package-json/v2/package-lock.json npm
  • 133 dependencies
test/data/package-json/v2/package.json npm
  • @types/shelljs ^0.8.11 development
  • autoprefixer ^10.4.13 development
  • fast-glob ^3.2.12 development
  • postcss ^8.4.18 development
  • shelljs ^0.8.5 development
  • tailwindcss ^3.2.1 development
  • ts-node ^10.9.1 development
  • typescript ^4.8.4 development
  • vite ^3.2.1 development
test/data/package-json/v2-workspace/app/package.json npm
  • @babel/core ^7.22.15 development
  • @emotion/babel-plugin ^11.11.0 development
  • @types/node ^20.5.9 development
  • @types/react ^18.2.21 development
  • @types/react-dom ^18.2.7 development
  • @vitejs/plugin-react ^4.0.4 development
  • envars ^0.4.0 development
  • happy-dom ^10.11.2 development
  • typescript ~5.2.2 development
  • vite ~4.4.9 development
  • vitest ~0.33.0 development
  • @babel/runtime ^7.22.15
  • @emotion/react ^11.11.1
  • @emotion/styled ^11.11.0
  • @mui/icons-material ^5.14.7
  • @mui/lab ^5.0.0-alpha.142
  • @mui/material ^5.14.7
  • firebase ^10.3.1
  • localforage ^1.10.0
  • notistack ^3.0.1
  • react ^18.2.0
  • react-dom ^18.2.0
  • react-router-dom ^6.15.0
  • recoil ^0.7.7
test/data/package-json/v2-workspace/package-lock.json npm
  • 959 dependencies
test/data/package-json/v2-workspace/package.json npm
  • @emotion/babel-plugin ^11.11.0 development
  • @emotion/eslint-plugin ^11.11.0 development
  • @types/eslint ^8.44.2 development
  • @typescript-eslint/eslint-plugin ^6.6.0 development
  • @typescript-eslint/parser ^6.6.0 development
  • eslint ^8.48.0 development
  • eslint-config-prettier ^9.0.0 development
  • eslint-import-resolver-typescript ^3.6.0 development
  • eslint-plugin-import ^2.28.1 development
  • eslint-plugin-jsx-a11y ^6.7.1 development
  • eslint-plugin-react ^7.33.2 development
  • eslint-plugin-react-hooks ^4.6.0 development
  • graphql ^16.8.0 development
  • happy-dom ^10.11.2 development
  • husky ^8.0.3 development
  • prettier ^3.0.3 development
  • react ^18.2.0 development
  • relay-config ^12.0.1 development
  • typescript ~5.2.2 development
  • vite ~4.4.9 development
  • vitest ~0.33.0 development
  • @npmcli/arborist ^7.1.0
  • chalk ^5.3.0
  • diff ^5.1.0
  • packageurl-js ^1.0.2
test/data/package-json/v2-workspace/scripts/package.json npm
  • envars ^0.4.0
  • execa ^8.0.1
  • get-port ^7.0.0
  • got ^13.0.0
  • graphql ^16.8.0
  • lodash-es ^4.17.21
  • miniflare ^3.20230821.0
  • prettier ^3.0.3
  • toml ^3.0.0
  • vite ^4.4.9
  • wrangler ^3.6.0
  • zx ^7.2.3
test/data/package-json/v3/package-lock.json npm
  • 152 dependencies
test/data/package-json/v3/package.json npm
  • connect-mongo ^5.0.0
  • express ^4.18.2
  • express-handlebars ^7.0.7
  • express-session ^1.17.3
  • jsonwebtoken ^9.0.0
  • mongoose ^7.3.1
  • passport ^0.6.0
  • passport-github2 ^0.1.12
test/data/pnpm-lock.yaml npm
  • 310 dependencies
test/data/yarn_locks/yarn.lock npm
  • 2029 dependencies
test/package-lock.json npm
  • 625 dependencies
test/pnpm-lock.yaml npm
  • 1776 dependencies
test/yarn.lock npm
  • asap 2.0.5
  • codemirror 5.26.0
  • codemirror-graphql 0.6.4
  • core-js 1.2.7
  • encoding 0.1.12
  • fbjs 0.8.12
  • graphiql 0.10.2
  • graphql 0.9.6
  • graphql-language-service-config 0.0.10
  • graphql-language-service-interface 0.0.10
  • graphql-language-service-parser 0.0.9
  • graphql-language-service-types 0.0.15
  • graphql-language-service-utils 0.0.9
  • iconv-lite 0.4.17
  • is-stream 1.1.0
  • isomorphic-fetch 2.2.1
  • iterall 1.1.1
  • js-tokens 3.0.1
  • loose-envify 1.3.1
  • marked 0.3.6
  • node-fetch 1.7.1
  • object-assign 4.1.1
  • primer-alerts 1.1.2
  • primer-avatars 0.4.6
  • primer-base 0.4.2
  • primer-blankslate 0.3.5
  • primer-box 2.1.2
  • primer-breadcrumb 0.1.1
  • primer-buttons 2.0.0
  • primer-cards 0.1.2
  • primer-core 3.0.0
  • primer-css 6.0.0
  • primer-forms 1.0.6
  • primer-labels 1.0.0
  • primer-layout 0.3.2
  • primer-markdown 3.3.7
  • primer-marketing 3.0.0
  • primer-marketing-support 0.5.0
  • primer-marketing-type 0.2.0
  • primer-navigation 1.0.0
  • primer-page-headers 0.1.1
  • primer-page-sections 0.1.1
  • primer-product 3.0.0
  • primer-support 4.0.0
  • primer-table-object 1.0.3
  • primer-tables 0.1.2
  • primer-tooltips 0.5.4
  • primer-truncate 0.3.2
  • primer-utilities 4.2.4
  • promise 7.1.1
  • prop-types 15.5.10
  • react 15.5.4
  • react-dom 15.5.4
  • setimmediate 1.0.5
  • ua-parser-js 0.7.12
  • whatwg-fetch 2.0.3
test/data/Microsoft.Web.Infrastructure.1.0.0.0.nuspec nuget
test/data/packages.config nuget
  • Antlr 3.5.0.2
  • AspNet.ScriptManager.bootstrap 3.3.7
  • AspNet.ScriptManager.jQuery 3.3.1
  • EntityFramework 6.2.0
  • Microsoft.AspNet.FriendlyUrls 1.0.2
  • Microsoft.AspNet.FriendlyUrls.Core 1.0.2
  • Microsoft.AspNet.ScriptManager.MSAjax 5.0.0
  • Microsoft.AspNet.ScriptManager.WebForms 5.0.0
  • Microsoft.AspNet.Web.Optimization 1.1.3
  • Microsoft.AspNet.Web.Optimization.WebForms 1.1.3
  • Microsoft.CodeDom.Providers.DotNetCompilerPlatform 2.0.0
  • Microsoft.Web.Infrastructure 1.0.0.0
  • Modernizr 2.8.3
  • Newtonsoft.Json 8.0.3
  • System.Data.SQLite 1.0.111.0
  • System.Data.SQLite.Core 1.0.111.0
  • System.Data.SQLite.EF6 1.0.111.0
  • System.Data.SQLite.Linq 1.0.111.0
  • WebGrease 1.6.0
  • bootstrap 3.3.7
  • jQuery 3.3.1
test/data/packages.lock.json nuget
  • Antlr 3.5.0.2
  • Microsoft.AspNet.Mvc 5.2.7
  • Microsoft.AspNet.Razor 3.2.7
  • Microsoft.AspNet.Web.Optimization 1.1.3
  • Microsoft.AspNet.WebPages 3.2.7
  • Microsoft.CodeDom.Providers.DotNetCompilerPlatform 2.0.1
  • Microsoft.Web.Infrastructure 1.0.0
  • Microsoft.jQuery.Unobtrusive.Validation 3.2.11
  • Modernizr 2.8.3
  • Newtonsoft.Json 12.0.2
  • WebGrease 1.6.0
  • bootstrap 3.4.1
  • jQuery 3.4.1
  • jQuery.Validation 1.17.0
test/data/paket.lock nuget
  • 0x53A.ReferenceAssemblies.Paket 0.2
  • FAKE 4.64.17
  • FSharp.Compiler.Service 17.0.1
  • FSharp.Core 5.0
  • ILRepack 2.0.18
  • Microsoft.AspNet.Razor 3.2.4
  • Microsoft.NETCore.Platforms 2.0
  • NETStandard.Library 2.0
  • Octokit 0.29
  • System.Collections.Immutable 1.4
  • System.Reflection.Metadata 1.5
  • System.ValueTuple 4.4
test/data/project.assets.json nuget
  • Microsoft.CSharp 4.0.1
  • Microsoft.CodeCoverage 17.1.0
  • Microsoft.DotNet.InternalAbstractions 1.0.0
  • Microsoft.NET.Test.Sdk 17.1.0
  • Microsoft.NETCore.Platforms 1.1.0
  • Microsoft.NETCore.Targets 1.1.0
  • Microsoft.NETFramework.ReferenceAssemblies 1.0.0
  • Microsoft.NETFramework.ReferenceAssemblies.net461 1.0.0
  • Microsoft.TestPlatform.ObjectModel 17.1.0
  • Microsoft.TestPlatform.TestHost 17.1.0
  • Microsoft.Win32.Primitives 4.3.0
  • Microsoft.Win32.Registry 4.3.0
  • Microsoft.Win32.SystemEvents 6.0.0
  • Mono.Cecil 0.11.0
  • NETStandard.Library 2.0.0
  • NLog 4.5.0
  • NUnit 3.13.3
  • NUnit.Console 3.11.1
  • NUnit.ConsoleRunner 3.11.1
  • NUnit.Extension.NUnitProjectLoader 3.6.0
  • NUnit.Extension.NUnitV2Driver 3.8.0
  • NUnit.Extension.NUnitV2ResultWriter 3.6.0
  • NUnit.Extension.TeamCityEventListener 1.0.7
  • NUnit.Extension.VSProjectLoader 3.8.0
  • NUnit3TestAdapter 3.16.1
  • NUnitLite 3.13.3
  • Newtonsoft.Json 9.0.1
  • NuGet.Frameworks 5.11.0
  • PublicApiGenerator 10.1.2
  • Serilog 2.0.0
  • Serilog.Sinks.TextWriter 2.0.0
  • System.AppContext 4.1.0
  • System.CodeDom 4.5.0
  • System.Collections 4.3.0
  • System.Collections.NonGeneric 4.3.0
  • System.Collections.Specialized 4.3.0
  • System.ComponentModel 4.3.0
  • System.ComponentModel.EventBasedAsync 4.3.0
  • System.ComponentModel.Primitives 4.3.0
  • System.ComponentModel.TypeConverter 4.3.0
  • System.Configuration.ConfigurationManager 4.5.0
  • System.Diagnostics.Debug 4.3.0
  • System.Diagnostics.EventLog 6.0.0
  • System.Diagnostics.Process 4.3.0
  • System.Diagnostics.Tools 4.0.1
  • System.Drawing.Common 6.0.0
  • System.Dynamic.Runtime 4.0.11
  • System.Globalization 4.3.0
  • System.Globalization.Extensions 4.3.0
  • System.IO 4.3.0
  • System.IO.FileSystem 4.3.0
  • System.IO.FileSystem.Primitives 4.3.0
  • System.Linq 4.3.0
  • System.Linq.Expressions 4.1.0
  • System.ObjectModel 4.0.12
  • System.Reflection 4.3.0
  • System.Reflection.Emit 4.0.1
  • System.Reflection.Emit.ILGeneration 4.0.1
  • System.Reflection.Emit.Lightweight 4.0.1
  • System.Reflection.Extensions 4.3.0
  • System.Reflection.Metadata 1.6.0
  • System.Reflection.Primitives 4.3.0
  • System.Reflection.TypeExtensions 4.3.0
  • System.Resources.ResourceManager 4.3.0
  • System.Runtime 4.3.0
  • System.Runtime.Extensions 4.3.0
  • System.Runtime.Handles 4.3.0
  • System.Runtime.InteropServices 4.3.0
  • System.Runtime.InteropServices.RuntimeInformation 4.3.0
  • System.Runtime.Serialization.Primitives 4.1.1
  • System.Security.AccessControl 6.0.0
  • System.Security.Cryptography.ProtectedData 4.5.0
  • System.Security.Permissions 6.0.0
  • System.Text.Encoding 4.3.0
  • System.Text.Encoding.Extensions 4.3.0
  • System.Text.RegularExpressions 4.3.0
  • System.Threading 4.3.0
  • System.Threading.Tasks 4.3.0
  • System.Threading.Tasks.Extensions 4.3.0
  • System.Threading.Thread 4.3.0
  • System.Threading.ThreadPool 4.3.0
  • System.Windows.Extensions 6.0.0
  • System.Xml.ReaderWriter 4.3.0
  • System.Xml.XDocument 4.0.11
  • System.Xml.XPath 4.3.0
  • System.Xml.XPath.XmlDocument 4.3.0
  • System.Xml.XmlDocument 4.3.0
  • log4net 2.0.13
  • runtime.native.System 4.3.0
test/data/sample-dotnet.csproj nuget
test/sample.csproj nuget
  • AdaptiveCards 1.0.3
  • Microsoft.AspNetCore.Mvc.NewtonsoftJson 3.1.1
  • Microsoft.Bot.Builder.Adapters.Facebook 4.8.0-rc2-preview
  • Microsoft.Bot.Builder.Dialogs 4.8.0
  • Microsoft.Bot.Builder.Integration.AspNet.Core 4.8.0
test/data/composer.json packagist
  • quickbooks/v3-php-sdk v4.0.6.1
test/data/composer.lock packagist
  • quickbooks/v3-php-sdk v4.0.6.1
test/data/pubspec.lock pub
  • async 2.8.2
  • boolean_selector 2.1.0
  • characters 1.2.0
  • charcode 1.3.1
  • clock 1.1.0
  • collection 1.15.0
  • fake_async 1.2.0
  • flare_flutter 3.0.2
  • flutter 0.0.0
  • flutter_lints 1.0.4
  • flutter_test 0.0.0
  • lints 1.0.1
  • matcher 0.12.11
  • material_color_utilities 0.1.3
  • meta 1.7.0
  • path 1.8.0
  • simple_animations 4.0.1
  • sky_engine 0.0.99
  • source_span 1.8.1
  • stack_trace 1.10.0
  • stream_channel 2.1.0
  • string_scanner 1.1.0
  • term_glyph 1.2.0
  • test_api 0.4.8
  • typed_data 1.3.0
  • vector_math 2.1.1
test/data/pubspec.yaml pub
  • flutter_lints ^1.0.4 development
  • flutter_test --- !ruby/hash:ActiveSupport::HashWithIndifferentAccess sdk: flutter development
  • flare_flutter ^3.0.2
  • flutter --- !ruby/hash:ActiveSupport::HashWithIndifferentAccess sdk: flutter
  • simple_animations ^4.0.1
test/data/Pipfile.lock pypi
  • appdirs ==1.4.3 develop
  • attrs ==19.3.0 develop
  • black ==19.3b0 develop
  • click ==7.0 develop
  • colorama ==0.4.3 develop
  • dataclasses-json ==0.3.6 develop
  • delegator.py ==0.1.1 develop
  • flask ==0.12.0 develop
  • importlib-metadata ==1.3.0 develop
  • isort ==4.3.21 develop
  • itsdangerous ==1.1.0 develop
  • jinja2 ==2.10.3 develop
  • markupsafe ==1.1.1 develop
  • marshmallow ==3.3.0 develop
  • marshmallow-enum ==1.5.1 develop
  • more-itertools ==8.0.2 develop
  • mypy-extensions ==0.4.3 develop
  • packaging ==19.2 develop
  • pexpect ==4.7.0 develop
  • pluggy ==0.13.1 develop
  • policykit ==0.3.1 develop
  • ptyprocess ==0.6.0 develop
  • py ==1.8.0 develop
  • pyparsing ==2.4.5 develop
  • pytest ==5.3.1 develop
  • pytest-black ==0.3.7 develop
  • pytest-flask ==0.15.0 develop
  • pytest-isort ==0.3.1 develop
  • pyyaml ==5.2 develop
  • six ==1.13.0 develop
  • stringcase ==1.2.0 develop
  • toml ==0.10.0 develop
  • typing-extensions ==3.7.4.1 develop
  • typing-inspect ==0.5.0 develop
  • wcwidth ==0.1.7 develop
  • werkzeug ==0.16.0 develop
  • zipp ==0.6.0 develop
  • click ==7.0
  • flask ==0.12.0
  • gunicorn ==20.0.4
  • itsdangerous ==1.1.0
  • jinja2 ==2.10.3
  • markupsafe ==1.1.1
  • six ==1.13.0
  • structlog ==19.2.0
  • werkzeug ==0.16.0
test/data/chen-science-requirements.txt pypi
  • aiofiles ==23.2.1 test
  • anyio ==4.0.0 test
  • appdirs ==1.4.4 test
  • attrs ==23.1.0 test
  • blinker ==1.5 test
  • certifi ==2023.7.22 test
  • charset-normalizer ==3.3.0 test
  • click ==8.1.7 test
  • colorama ==0.4.6 test
  • contourpy ==1.1.1 test
  • cycler ==0.12.0 test
  • exceptiongroup ==1.1.3 test
  • filelock ==3.12.4 test
  • fonttools ==4.43.0 test
  • gitdb ==4.0.10 test
  • gitpython ==3.1.37 test
  • h11 ==0.14.0 test
  • h2 ==4.1.0 test
  • hpack ==4.0.0 test
  • httpcore ==0.17.3 test
  • httpx ==0.24.1 test
  • hypercorn ==0.14.4 test
  • hyperframe ==6.0.1 test
  • idna ==3.4 test
  • importlib-metadata ==6.8.0 test
  • importlib-resources ==6.1.0 test
  • itsdangerous ==2.1.2 test
  • jinja2 ==3.1.2 test
  • joblib ==1.3.2 test
  • jsonschema ==4.19.1 test
  • jsonschema-specifications ==2023.7.1 test
  • kiwisolver ==1.4.5 test
  • lxml ==4.9.3 test
  • markdown-it-py ==3.0.0 test
  • markupsafe ==2.1.3 test
  • matplotlib ==3.7.3 test
  • mdurl ==0.1.2 test
  • mpmath ==1.3.0 test
  • networkx ==3.1 test
  • numpy ==1.24.4 test
  • oras ==0.1.25 test
  • orjson ==3.9.7 test
  • packageurl-python ==0.11.2 test
  • packaging ==23.2 test
  • pandas ==2.0.3 test
  • pillow ==10.0.1 test
  • pkgutil-resolve-name ==1.3.10 test
  • priority ==2.0.0 test
  • psutil ==5.9.5 test
  • pydot ==1.4.2 test
  • pyg-lib ==0.2.0 test
  • pygments ==2.16.1 test
  • pygraphviz ==1.11 test
  • pyparsing ==3.1.1 test
  • python-dateutil ==2.8.2 test
  • pytz ==2023.3.post1 test
  • quart ==0.18.4 test
  • referencing ==0.30.2 test
  • requests ==2.31.0 test
  • rich ==13.6.0 test
  • rpds-py ==0.10.3 test
  • scikit-learn ==1.3.1 test
  • scipy ==1.10.1 test
  • setuptools ==68.2.2 test
  • setuptools-scm ==8.0.3 test
  • six ==1.16.0 test
  • smmap ==5.0.1 test
  • sniffio ==1.3.0 test
  • sympy ==1.12 test
  • threadpoolctl ==3.2.0 test
  • tomli ==2.0.1 test
  • torch ==2.0.1 test
  • torch-cluster ==1.6.1 test
  • torch-geometric ==2.3.1 test
  • torch-scatter ==2.1.1 test
  • torch-sparse ==0.6.17 test
  • torch-spline-conv ==1.2.2 test
  • torchdata ==0.6.1 test
  • torchtext ==0.15.2 test
  • tqdm ==4.66.1 test
  • typing-extensions ==4.8.0 test
  • tzdata ==2023.3 test
  • urllib3 ==2.0.5 test
  • websockets ==11.0.3 test
  • werkzeug ==3.0.0 test
  • wsproto ==1.2.0 test
  • zipp ==3.17.0 test
test/data/poetry.lock pypi
  • pycodestyle 2.5.0 develop
  • pytest-codestyle 1.4.0 develop
  • pytest-cov 2.8.1 develop
  • atomicwrites 1.3.0
  • attrs 19.3.0
  • certifi 2019.9.11
  • chardet 3.0.4
  • colorama 0.4.1
  • coverage 4.5.4
  • coveralls 1.8.2
  • docopt 0.6.2
  • idna 2.8
  • importlib-metadata 0.23
  • more-itertools 7.2.0
  • mypy 0.740
  • mypy-extensions 0.4.3
  • packaging 19.2
  • pathlib2 2.3.5
  • pluggy 0.13.0
  • py 1.8.0
  • pyparsing 2.4.5
  • pytest 5.2.3
  • pytest-azurepipelines 0.8.0
  • pytest-mypy 0.4.2
  • pyyaml 5.1.2
  • requests 2.22.0
  • six 1.13.0
  • typed-ast 1.4.0
  • typing-extensions 3.7.4.1
  • urllib3 1.25.7
  • wcwidth 0.1.7
  • zipp 0.6.0
test/data/pyproject.toml pypi
  • gitpython ^3.1.31
  • httpx ^0.24.1
  • packageurl-python ^0.11.1
  • psutil ^5.9.5
  • python >=3.8.1,<3.12
  • quart ^0.18.4
  • rich ^13.4.2
test/data/requirements.comments.txt pypi
  • cachetools ==4.1.0 test
  • certifi ==2020.4.5.1 test
  • chardet ==3.0.4 test
  • click ==7.1.2 test
  • dparse ==0.5.1 test
  • google-api-core ==1.17.0 test
  • google-api-python-client ==1.8.3 test
  • google-auth ==1.15.0 test
  • google-auth-httplib2 ==0.0.3 test
  • google-auth-oauthlib ==0.4.1 test
  • googleapis-common-protos ==1.51.0 test
  • httplib2 ==0.18.0 test
  • idna ==2.9 test
  • oauthlib ==3.1.0 test
  • packaging ==20.4 test
  • pip-tools ==5.1.2 test
  • protobuf ==3.12.0 test
  • pyasn1 ==0.4.8 test
  • pyasn1-modules ==0.2.8 test
  • pyparsing ==2.4.7 test
  • pytz ==2020.1 test
  • pyyaml ==5.3.1 test
  • requests ==2.23.0 test
  • requests-oauthlib ==1.3.0 test
  • rsa ==4.0 test
  • safety ==1.9.0 test
  • six ==1.14.0 test
  • toml ==0.10.1 test
  • tqdm ==4.46.0 test
  • uritemplate ==3.0.1 test
  • urllib3 ==1.25.9 test
test/data/requirements.complex.txt pypi
  • 1.1 * test
  • 1.9. * test
  • August2015 * test
  • August2017 * test
  • August2019 * test
  • Bookmarksarestoredin * test
  • Denotesarevlogdeltaencodingformatthatwasexperimentaland * test
  • Denotesthatthestoreforarepositoryissharedfromanotherlocation * test
  • Denotesthattreemanifestsarebeingused.Treemanifestsare * test
  • Denotesthatversion2ofmanifestsarebeingused. * test
  • Derivativeof * test
  • Extensionsmayaddrequirements.Whentheydothis ,clientsnotrunning test
  • Ifthisrequirementisnotpresent ,version0revlogsareassumed. test
  • July2011 * test
  • May2015 * test
  • Mercurial1.7 * test
  • Mercurialcoredistribution. * test
  • Notethatasof5.5 ,onlyinstallationscompiledwiththeRustextensionwill test
  • Oneofthefirstthingsclientsdowhenopeningarepositoryisread * test
  • Repositoriescontainafile * test
  • Revlogsshouldbecreatedwiththe * test
  • SupportforthisrequirementwasaddedinMercurial1.9 * test
  • SupportforthisrequirementwasaddedinMercurial3.4 * test
  • SupportforthisrequirementwasaddedinMercurial4.3 * test
  • SupportforthisrequirementwasaddedinMercurial5.1 * test
  • SupportforthisrequirementwasaddedinMercurial5.5 * test
  • The * test
  • Thefollowingsectionsdescribetherequirementsdefinedbythe * test
  • TherequirementwasaddedinMercurial1.3 * test
  • TherequirementwasaddedinMercurial4.2 * test
  • Theworkingdirectoryissparse * test
  • Thisrequirementhasbeenenabledbydefaultsincethe * test
  • Thisrequirementisenabledbydefaultwhenthe * test
  • Thisrequirementissetwhenarepositoryiscreatedvia * test
  • ThisrequirementwasaddedinMercurial1.7andremovedinMercurial * test
  • Whenpresent ,revlogsareversion1 test
  • abortingifnot.Requirementsarethereforeastrongmechanismto * test
  • anextensionwillbeunabletoreadfromrepositories. * test
  • benefitfromaspeedup.Theotherinstallationswilldothenecessaryworkto * test
  • bepresentonrepositoriesthathaveoptedintoasparseworking * test
  • bookmarksinstore * test
  • defaultuntilMercurial3.7 * test
  • directlyin * test
  • directory. * test
  • disabledbydefault. * test
  • disappearinafutureMercurialrelease.Therequirementwillonly * test
  • disk.Thisprovidesspeedbenefit * test
  • dotencode * test
  • enabled * test
  • encodesreservedfilenames. * test
  • exp-sparse * test
  • features * test
  • fncache * test
  • formatsorevencorruptingthembywritingtothem. * test
  • fortheformatandrequirementwereremovedinMercurial4.6 * test
  • generaldelta * test
  • generaldeltaflagwillcausedeltastobeencodedagainstaparent * test
  • in2006.The * test
  • isenabled * test
  • itwasneverenabledbydefault. * test
  • keeptheindexuptodate ,butwillsufferaslowdown. test
  • manifestlog. * test
  • manifestv2 * test
  • onemanifestperdirectory * test
  • parentdelta * test
  • persistent-nodemap * test
  • persistentnodemapisonlyusedfortworevlogs * test
  • preventincompatibleclientsfromreadingfromunknownrepository * test
  • relshared * test
  • replacedby * test
  • revisioninsteadofthepreviousrevisionintherevlog. * test
  • revlogv1 * test
  • shared * test
  • sincethe * test
  • status. * test
  • store * test
  • storeofthisrepository. * test
  • thathaveoptedintothisformat * test
  • topreventissuesonOSXandWindows. * test
  • treemanifest * test
  • usingthe * test
  • version0.9.2 * test
  • wasintroducedinMercurial0.9.2. * test
  • wheretheyusedtobestored.Theactivebookmarkisstillstored * test
  • whetherornot * test
  • withtherepository.ThisfilehasbeenpresentinMercurialsince * test
test/data/requirements.freeze.txt pypi
  • Babel ==2.12.1 test
  • Jinja2 ==3.1.2 test
  • MarkupSafe ==2.1.2 test
  • Pillow ==9.4.0 test
  • PyYAML ==6.0 test
  • Pygments ==2.14.0 test
  • Sphinx ==6.1.3 test
  • alabaster ==0.7.13 test
  • appnope ==0.1.3 test
  • argcomplete ==2.0.0 test
  • asttokens ==2.2.1 test
  • attrs ==22.2.0 test
  • backcall ==0.2.0 test
  • certifi ==2022.12.7 test
  • charset-normalizer ==3.0.1 test
  • click ==8.1.3 test
  • cloudpickle ==2.2.1 test
  • colorlog ==6.7.0 test
  • comm ==0.1.2 test
  • contourpy ==1.0.7 test
  • coverage ==7.2.1 test
  • cycler ==0.11.0 test
  • debugpy ==1.6.6 test
  • decorator ==5.1.1 test
  • distlib ==0.3.6 test
  • docutils ==0.19 test
  • elastic-transport ==8.4.0 test
  • elasticsearch ==8.6.2 test
  • exceptiongroup ==1.1.0 test
  • executing ==1.2.0 test
  • fastjsonschema ==2.16.3 test
  • filelock ==3.9.0 test
  • fonttools ==4.38.0 test
  • huggingface-hub ==0.12.1 test
  • idna ==3.4 test
  • imagesize ==1.4.1 test
  • importlib-metadata ==6.0.0 test
  • importlib-resources ==5.12.0 test
  • iniconfig ==2.0.0 test
  • ipykernel ==6.21.2 test
  • ipython ==8.11.0 test
  • jedi ==0.18.2 test
  • joblib ==1.2.0 test
  • jsonschema ==4.17.3 test
  • jupyter_client ==8.0.3 test
  • jupyter_core ==5.2.0 test
  • kiwisolver ==1.4.4 test
  • lightgbm ==3.3.5 test
  • llvmlite ==0.39.1 test
  • matplotlib ==3.7.0 test
  • matplotlib-inline ==0.1.6 test
  • mypy ==1.0.1 test
  • mypy-extensions ==1.0.0 test
  • nbformat ==5.7.3 test
  • nbval ==0.10.0 test
  • nest-asyncio ==1.5.6 test
  • nltk ==3.8.1 test
  • nox ==2022.11.21 test
  • numba ==0.56.4 test
  • numpy ==1.23.5 test
  • numpydoc ==1.5.0 test
  • packaging ==23.0 test
  • pandas ==1.5.3 test
  • parso ==0.8.3 test
  • pexpect ==4.8.0 test
  • pickleshare ==0.7.5 test
  • pkgutil_resolve_name ==1.3.10 test
  • platformdirs ==3.0.0 test
  • pluggy ==1.0.0 test
  • prompt-toolkit ==3.0.38 test
  • psutil ==5.9.4 test
  • ptyprocess ==0.7.0 test
  • pure-eval ==0.2.2 test
  • pyparsing ==3.0.9 test
  • pyrsistent ==0.19.3 test
  • pytest ==7.2.1 test
  • pytest-cov ==4.0.0 test
  • pytest-mock ==3.10.0 test
  • python-dateutil ==2.8.2 test
  • pytz ==2022.7.1 test
  • pyzmq ==25.0.0 test
  • regex ==2022.10.31 test
  • requests ==2.28.2 test
  • scikit-learn ==1.2.1 test
  • scipy ==1.10.1 test
  • sentence-transformers ==2.2.2 test
  • sentencepiece ==0.1.97 test
  • shap ==0.41.0 test
  • six ==1.16.0 test
  • slicer ==0.0.7 test
  • snowballstemmer ==2.2.0 test
  • sphinxcontrib-applehelp ==1.0.4 test
  • sphinxcontrib-devhelp ==1.0.2 test
  • sphinxcontrib-htmlhelp ==2.0.1 test
  • sphinxcontrib-jsmath ==1.0.1 test
  • sphinxcontrib-qthelp ==1.0.3 test
  • sphinxcontrib-serializinghtml ==1.1.5 test
  • stack-data ==0.6.2 test
  • threadpoolctl ==3.1.0 test
  • tokenizers ==0.12.1 test
  • tomli ==2.0.1 test
  • torch ==1.11.0 test
  • torchvision ==0.12.0 test
  • tornado ==6.2 test
  • tqdm ==4.64.1 test
  • traitlets ==5.9.0 test
  • transformers ==4.20.1 test
  • typing_extensions ==4.5.0 test
  • urllib3 ==1.26.14 test
  • virtualenv ==20.20.0 test
  • wcwidth ==0.2.6 test
  • xgboost ==1.7.4 test
  • zipp ==3.15.0 test
test/data/Gemfile.lock rubygems
  • 141 dependencies
test/data/xmlrpc.gemspec rubygems
test/data/Package.resolved swiftpm
  • github.com/apple/swift-argument-parser 1.0.3
  • github.com/apple/swift-cmark
  • github.com/apple/swift-docc-plugin 1.1.0
  • github.com/apple/swift-docc-symbolkit 1.0.0
test/data/deno-project/deno.lock deno
  • @std/assert 1.0.19
  • @std/cli 1.0.32
  • @std/encoding 1.0.11
  • @std/fmt 1.0.10
  • @std/fs 1.0.24
  • @std/html 1.0.7
  • @std/http 1.1.2
  • @std/internal 1.0.14
  • @std/media-types 1.1.0
  • @std/net 1.0.6
  • @std/path 1.1.6
  • @std/streams 1.1.1
  • chalk 5.6.2
  • lodash 4.18.1
test/data/pnpm_locks/pnpm-workspace.yaml npm
  • @gwhitney/detect-indent 7.0.1
  • @pnpm/builder.policy 3.0.0
  • @pnpm/byline ^1.0.0
  • @pnpm/colorize-semver-diff ^1.0.1
  • @pnpm/config.env-replace 3.0.0
  • @pnpm/exec ^2.0.0
  • @pnpm/fs.packlist 2.0.0
  • @pnpm/log.group 3.0.0
  • @pnpm/meta-updater 2.0.3
  • @pnpm/network.agent ^2.0.0
  • @pnpm/nopt ^0.2.1
  • @pnpm/npm-conf 3.0.0
  • @pnpm/npm-lifecycle ^1000.0.1
  • @pnpm/npm-package-arg ^1.0.0
  • @pnpm/os.env.path-extender ^2.0.0
  • @pnpm/patch-package 0.0.0
  • @pnpm/registry-mock 3.48.0
  • @pnpm/semver-diff ^1.1.0
  • @pnpm/tabtab ^0.5.4
  • @pnpm/util.lex-comparator 3.0.0
  • @reflink/reflink 0.1.18
  • @rushstack/worker-pool 0.4.9
  • @types/adm-zip ^0.5.5
  • @types/archy 0.0.33
  • @types/cross-spawn ^6.0.6
  • @types/fs-extra ^9.0.13
  • @types/graceful-fs ^4.1.9
  • @types/hosted-git-info ^3.0.5
  • @types/ini 1.3.31
  • @types/is-gzip 2.0.0
  • @types/is-windows ^1.0.2
  • @types/js-yaml ^4.0.9
  • @types/lodash.clonedeep ^4.5.9
  • @types/lodash.throttle 4.1.7
  • @types/micromatch ^4.0.7
  • @types/node ^18.19.34
  • @types/normalize-package-data ^2.4.4
  • @types/normalize-path ^3.0.2
  • @types/object-hash 3.0.6
  • @types/parse-json ^4.0.2
  • @types/pnpm__byline npm:@types/byline@^4.2.36
  • @types/proxyquire ^1.3.31
  • @types/ramda 0.29.12
  • @types/retry ^0.12.5
  • @types/rimraf ^3.0.2
  • @types/semver 7.5.3
  • @types/shell-quote ^1.7.5
  • @types/signal-exit ^3.0.4
  • @types/sinon ^10.0.20
  • @types/ssri ^7.1.5
  • @types/tar ^6.1.13
  • @types/tar-stream ^2.2.3
  • @types/touch ^3.1.5
  • @types/uuid ^8.3.4
  • @types/validate-npm-package-name ^4.0.2
  • @types/which ^2.0.2
  • @types/write-file-atomic ^4.0.3
  • @types/yarnpkg__lockfile ^1.1.9
  • @types/zkochan__table npm:@types/table@6.0.0
  • @yarnpkg/core 4.0.5
  • @yarnpkg/extensions 2.0.3
  • @yarnpkg/lockfile ^1.1.0
  • @yarnpkg/nm 4.0.5
  • @yarnpkg/parsers 3.0.0
  • @yarnpkg/pnp ^4.0.6
  • @zkochan/cmd-shim ^6.0.0
  • @zkochan/diable ^1.0.2
  • @zkochan/retry ^0.2.0
  • @zkochan/rimraf ^3.0.2
  • @zkochan/table ^2.0.1
  • adm-zip ^0.5.14
  • ansi-diff ^1.1.1
  • archy ^1.0.0
  • better-path-resolve 1.0.0
  • bin-links ^4.0.4
  • bole ^5.0.14
  • boxen ^5.1.2
  • camelcase ^6.3.0
  • camelcase-keys ^6.2.2
  • can-link ^2.0.0
  • can-write-to-dir ^1.1.1
  • chalk ^4.1.2
  • ci-info ^3.9.0
  • cli-columns ^4.0.0
  • cli-truncate ^2.1.0
  • cmd-extension ^1.0.2
  • comver-to-semver ^1.0.0
  • concurrently 8.2.1
  • cross-spawn ^7.0.5
  • deep-require-cwd 1.0.0
  • delay ^5.0.0
  • detect-libc ^2.0.3
  • didyoumean2 ^6.0.1
  • dint ^5.1.0
  • dir-is-case-sensitive ^2.0.0
  • encode-registry ^3.0.1
  • enquirer ^2.4.1
  • esbuild ^0.19.12
  • escape-string-regexp ^4.0.0
  • execa npm:safe-execa@0.1.2
  • exists-link 2.0.0
  • fast-deep-equal ^3.1.3
  • fast-glob ^3.3.2
  • filenamify ^4.3.0
  • find-up ^5.0.0
  • fs-extra ^11.2.0
  • fuse-native ^2.2.6
  • get-npm-tarball-url ^2.1.0
  • get-port ^5.1.1
  • ghooks 2.0.4
  • graceful-fs ^4.2.11
  • graceful-git ^4.0.0
  • graph-cycles 1.2.1
  • hosted-git-info npm:@pnpm/hosted-git-info@1.0.0
  • https-proxy-server-express 0.1.2
  • hyperdrive-schemas ^2.0.0
  • ini 4.1.1
  • is-gzip 2.0.0
  • is-inner-link ^4.0.0
  • is-port-reachable 3.0.0
  • is-subdir ^1.2.0
  • is-windows ^1.0.2
  • isexe 2.0.0
  • jest-diff ^29.7.0
  • js-yaml npm:@zkochan/js-yaml@0.0.7
  • json5 ^2.2.3
  • load-json-file ^6.2.0
  • lodash.clonedeep ^4.5.0
  • lodash.throttle 4.1.1
  • loud-rejection ^2.2.0
  • lru-cache ^10.2.2
  • make-empty-dir ^3.0.2
  • mem ^8.1.1
  • micromatch ^4.0.7
  • ndjson ^2.0.0
  • nerf-dart 1.0.0
  • nock 13.3.4
  • node-fetch npm:@pnpm/node-fetch@1.0.0
  • node-gyp ^11.0.0
  • normalize-newline 3.0.0
  • normalize-package-data ^5.0.0
  • normalize-path ^3.0.0
  • normalize-registry-url 2.0.0
  • npm-packlist 5.1.3
  • object-hash 3.0.0
  • p-any 3.0.0
  • p-defer ^3.0.0
  • p-every ^2.0.0
  • p-filter ^2.1.0
  • p-limit ^3.1.0
  • p-map-values ^1.0.0
  • p-memoize 4.0.1
  • p-queue ^6.6.2
  • p-settle ^4.1.1
  • parse-json ^5.2.0
  • parse-npm-tarball-url ^3.0.0
  • path-absolute ^1.0.1
  • path-exists ^4.0.0
  • path-name ^1.0.0
  • path-temp ^2.1.0
  • pidtree ^0.6.0
  • pkg npm:@yao-pkg/pkg@5.12.0
  • preferred-pm ^3.1.3
  • pretty-bytes ^5.6.0
  • pretty-ms ^7.0.1
  • process-exists ^4.1.0
  • promise-share ^1.0.0
  • proxyquire ^2.1.3
  • ps-list ^7.2.0
  • ramda npm:@pnpm/ramda@0.28.1
  • read-ini-file 4.0.0
  • read-yaml-file ^2.1.0
  • realpath-missing ^1.1.0
  • rename-overwrite ^6.0.0
  • render-help ^1.0.3
  • resolve-link-target ^2.0.0
  • rfc4648 ^1.5.3
  • rimraf ^3.0.2
  • root-link-target ^3.1.0
  • run-groups ^3.0.1
  • rxjs ^7.8.1
  • safe-buffer 5.2.1
  • safe-execa ^0.1.4
  • safe-promise-defer ^1.0.1
  • sanitize-filename ^1.6.3
  • semver ^7.6.2
  • semver-range-intersect ^0.3.1
  • semver-utils ^1.1.4
  • shell-quote ^1.8.2
  • signal-exit ^3.0.7
  • sinon ^16.1.3
  • sort-keys ^4.2.0
  • split-cmd ^1.1.0
  • ssri 10.0.5
  • stacktracey ^2.1.8
  • string-length ^4.0.2
  • strip-ansi ^6.0.1
  • strip-bom ^4.0.0
  • strip-comments-strings 1.2.0
  • symlink-dir ^6.0.4
  • tar ^6.2.1
  • tar-stream ^2.2.0
  • tempy ^1.0.1
  • terminal-link ^2.1.1
  • touch 3.1.0
  • tree-kill ^1.2.2
  • uuid ^9.0.1
  • v8-compile-cache 2.4.0
  • validate-npm-package-name 5.0.0
  • version-selector-type ^3.0.0
  • which npm:@pnpm/which@^3.0.1
  • write-file-atomic ^5.0.1
  • write-ini-file 4.0.1
  • write-json-file ^4.3.0
  • write-pkg 4.0.0
  • write-yaml-file ^5.0.0
  • yaml-tag 1.1.0
test/data/type-only-repotest/package-lock.json npm
  • is-even 1.0.0
  • is-number 6.0.0
  • is-odd 3.0.1
test/repotests/uv-smoke/pyproject.toml pypi
  • certifi ==2022.12.7
  • charset-normalizer ==2.0.12
  • idna ==3.3
  • requests ==2.28.0
  • urllib3 ==1.26.13
deno.json deno
  • @appthreat/atom 3.1.1
  • @appthreat/atom-parsetools 1.3.0
  • @babel/parser 8.0.4
  • @babel/traverse 8.0.4
  • @bufbuild/protobuf 2.13.0
  • @cdxgen/cdx-hbom 0.5.1
  • @cdxgen/cdx-proto 2.2.0
  • @cdxgen/cdx-purl 0.0.5
  • @cdxgen/cdxgen-plugins-bin 3.0.3
  • @cdxgen/safer-exec 0.15.0
  • @iarna/toml 2.2.5
  • @isaacs/string-locale-compare 1.1.0
  • @npmcli/fs 6.0.0
  • @npmcli/map-workspaces 6.0.0
  • @npmcli/name-from-folder 5.0.0
  • @npmcli/package-json 8.0.0
  • ajv 8.20.0
  • ajv-formats 3.0.1
  • body-parser 2.3.0
  • common-ancestor-path 2.0.0
  • compression 1.8.1
  • connect 3.7.0
  • edn-data 1.2.2
  • glob 13.0.6
  • json-stringify-nice 1.1.4
  • jsonata 2.2.2
  • node-stream-zip 1.16.0
  • npm-package-arg 14.0.0
  • parse-conflict-json 6.0.0
  • read-package-json-fast 6.0.0
  • semver 7.8.5
  • ssri 14.0.0
  • tar 7.5.22
  • treeverse 3.0.0
  • undici 8.9.0
  • walk-up-path 4.0.0
  • yaml 2.9.0
  • yargs 18.1.0
.github/workflows/image-build.yml actions
  • ./.github/actions/build-docker-image * composite
  • ./.github/actions/generate-attach-sbom * composite
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
  • actions/setup-python 5fda3b95a4ea91299a34e894583c3862153e4b97 composite
  • docker/login-action dbcb813823bdd20940b903addbd779551569679f composite
  • docker/metadata-action dc802804100637a589fabce1cb79ff13a1411302 composite
  • docker/setup-buildx-action bb05f3f5519dd87d3ba754cc423b652a5edd6d2c composite
  • int128/docker-manifest-create-action 1e15cac7af24af7153ff7968c09072d61bb4456b composite
  • jlumbroso/free-disk-space 54081f138730dfa15788a46383842cd2f914a1be composite
  • pnpm/action-setup 0977fd99725f1db4007ccb2928dbb4e90d06cc86 composite
.github/actions/build-docker-image/action.yml actions
  • docker/build-push-action d08e5c354a6adb9ed34480a06d141179aa583294 composite
.github/workflows/lint.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
  • pnpm/action-setup 0977fd99725f1db4007ccb2928dbb4e90d06cc86 composite
test/data/bzlmod-smoke/MODULE.bazel bazel
  • bazel_skylib 1.7.1
  • rules_go 0.39.1
  • rules_jvm_external 5.3
test/data/go-dataflow-repotest/go.sum go
  • golang.org/x/crypto v0.31.0
  • golang.org/x/sys v0.28.0
test/repotests/maven-smoke/pom.xml maven
  • com.google.guava:guava 31.1-jre
  • org.apache.commons:commons-lang3 3.12.0
test/data/vue-repotest/package-lock.json npm
  • @vitejs/plugin-vue 5.0.0 development
  • vite 5.0.0 development
  • axios 1.6.0
  • pinia 2.1.0
  • vue 3.4.0
  • vue-router 4.3.0
test/repotests/container-rootfs-smoke/fixture/app/node_modules/left-pad/package.json npm
test/repotests/container-rootfs-smoke/fixture/usr/lib/node_modules/semver/package.json npm
.github/actions/generate-attach-sbom/action.yml actions
  • ./.github/actions/build-docker-image * composite
.github/workflows/build-image.yml actions
  • ./.github/actions/build-docker-image * composite
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
.github/workflows/build-rolling-image.yml actions
test/data/angular-cli-scripts-repotest/package-lock.json npm
  • @angular/cli 17.3.0
  • @angular/core 17.3.0
  • left-pad 1.3.0
  • license-report 6.5.0
test/data/angular-css-config-repotest/package.json npm
  • @angular/cli 17.3.0
  • @angular/compiler-cli 17.3.0
  • @angular/core 17.3.0
  • @fortawesome/fontawesome-free 6.7.2
  • angular-i18n 1.8.3
  • bootstrap 5.3.3
  • flag-icons 7.3.2
  • left-pad 1.3.0
  • material-symbols 0.28.2
  • typescript 5.5.4
test/data/cache-disable-repotest/package.json npm
  • left-pad https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz
test/data/dry-run-private-registry-repotest/package.json npm
  • left-pad 1.3.0
test/data/npm-git-ssh/package-lock.json npm
  • @group/my_project 1.0.6
test/data/npm-hidden-lockfile-repotest/package-lock.json npm
  • is-number 7.0.0
test/data/npm-hidden-lockfile-repotest/package.json npm
  • is-number 7.0.0
test/data/pnpm-git-ssh-repotest/package.json npm
  • @group/my_project ssh://git@private-gitlab.com/group/my_project.git#main
  • zod ^4.3.6
test/repotests/yarn-smoke/package.json npm
  • left-pad 1.3.0
  • semver 7.3.5
test/data/Server.csproj nuget
  • Foxit.PDF.Printing 2.0.1.25123
  • ICSharpCode.SharpZipLib 1.1.0.145
  • Microsoft.Exchange.WebServices 15.0.0.0
  • Microsoft.Identity.Client 4.52.0.0
  • Microsoft.IdentityModel.Abstractions 6.22.0.0
  • Spo.SPClib 16.2.0.0
  • Spo.SPDlib 16.2.0.0
  • Spo.Utilities 16.2.0.0
  • XlateEBCDICLib 2.0.0.0
  • nsoftware.IPWorksSSH 9.0.5724.0
pnpm-workspace.yaml npm
test/data/angular-cli-scripts-repotest/package.json npm
  • @angular/cli 17.3.0
  • @angular/core 17.3.0
  • left-pad 1.3.0
  • license-report 6.5.0
test/data/angular-template-repotest/package-lock.json npm
  • @angular/core 17.3.0
  • @fortawesome/fontawesome-free 6.7.2
  • bootstrap-icons 1.11.3
  • left-pad 1.3.0
  • material-symbols 0.28.2
  • primeicons 7.0.0
test/data/angular-template-repotest/package.json npm
  • @angular/core 17.3.0
  • @fortawesome/fontawesome-free 6.7.2
  • bootstrap-icons 1.11.3
  • left-pad 1.3.0
  • material-symbols 0.28.2
  • primeicons 7.0.0
pnpm-lock.yaml npm
  • 214 dependencies
test/repotests/npm-smoke/package-lock.json npm
  • left-pad 1.3.0
  • lru-cache 6.0.0
  • semver 7.3.5
  • yallist 4.0.0
.github/workflows/license-policy.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
  • pnpm/action-setup 0977fd99725f1db4007ccb2928dbb4e90d06cc86 composite
test/data/cmakes/conanfile.txt conan
  • qr-code-generator 1.8.0
test/data/conanfile.txt conan
  • jerryscript 2.2.0
  • wolfssl 4.4.0
  • zstd 1.4.4
test/data/angular-css-config-repotest/package-lock.json npm
  • @angular/cli 17.3.0
  • @angular/compiler-cli 17.3.0
  • @angular/core 17.3.0
  • @fortawesome/fontawesome-free 6.7.2
  • angular-i18n 1.8.3
  • bootstrap 5.3.3
  • flag-icons 7.3.2
  • left-pad 1.3.0
  • material-symbols 0.28.2
  • typescript 5.5.4
test/data/asar-fixture-app/package-lock.json npm
  • left-pad 1.3.0
  • sketchy-addon 0.1.0
  • usb 2.14.0
test/data/bun/bun.lock npm
  • typescript 6.0.3 development
  • @babel/parser 7.29.7
  • @babel/types 7.29.7
  • fsevents 2.3.3
  • left-pad 1.3.0
test/data/yarn-workspaces-same-version-demo/package.json npm
.github/workflows/nydus-demo.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/setup-java b6effb05e454b25005698d916606bdc6ffcbf961 composite
  • actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
.github/workflows/rebuild-release-images.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite