docs/data/reusables/dependency-graph/supported-package-ecosystems.md at b0e01d5bfb400a10fc656102b75219db6ad02c66

mirror of synced 2026-01-06 06:02:35 -05:00

Files

Eric Sorenson 3654df4e95 Updates to dependency graph documentation with information about recent changes (#55449 )

Co-authored-by: Lewis Jones <ljones140@github.com>
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>

2025-05-05 16:28:43 +00:00

3.2 KiB

Raw Blame History

Package manager	Languages	Transitive dependencies	Recommended files	Additional files
Cargo	Rust	{% octicon "x" aria-label="Not supported" %}	`Cargo.lock`	`Cargo.toml`
Composer	PHP	{% octicon "x" aria-label="Not supported" %}	`composer.lock`	`composer.json`
NuGet	.NET languages (C#, F#, VB), C++	{% octicon "x" aria-label="Not supported" %}	`.csproj`, `.vbproj`, `.nuspec`, `.vcxproj`, `.fsproj`	`packages.config`
{% data variables.product.prodname_actions %} workflows	YAML	{% octicon "x" aria-label="Not supported" %}	`.yml`, `.yaml`	{% octicon "x" aria-label="None" %}
Go modules	Go	{% octicon "x" aria-label="Not supported" %}	`go.mod`	{% octicon "x" aria-label="None" %}
Maven	Java, Scala	{% octicon "check" aria-label="Supported" %}	`pom.xml`	{% octicon "x" aria-label="None" %}
npm	JavaScript	{% octicon "check" aria-label="Supported" %}	`package-lock.json`	`package.json`
pip	Python	{% octicon "x" aria-label="Not supported" %}	`requirements.txt`, `pipfile.lock`	`pipfile`, `setup.py`
pnpm	JavaScript	{% octicon "check" aria-label="Supported" %}	`pnpm-lock.yaml`	`package.json`
pub	Dart	{% octicon "x" aria-label="Not supported" %}	`pubspec.lock`	`pubspec.yaml`
Python Poetry	Python	{% octicon "x" aria-label="Not supported" %}	`poetry.lock`	`pyproject.toml`
RubyGems	Ruby	{% octicon "x" aria-label="Not supported" %}	`Gemfile.lock`	`Gemfile`, `*.gemspec`
Swift Package Manager	Swift	{% octicon "x" aria-label="Not supported" %}	`Package.resolved`	{% octicon "x" aria-label="None" %}
Yarn	JavaScript	{% octicon "check" aria-label="Supported" %}	`yarn.lock`	`package.json`

[!NOTE]{% ifversion transitive-dependency-labeling-npm %}

The Transitive dependencies column indicates whether static analysis will add direct and transitive labels for dependent packages in that ecosystem. Labels will appear on the dependency graph view, {% data variables.product.prodname_dependabot_alerts %}, the GraphQL API, and exported SBOMs. For more information, see AUTOTITLE.{% endif %}

If you list your Python dependencies within a setup.py file, we may not be able to parse and list every dependency in your project.

{% data variables.product.prodname_actions %} workflows must be located in the .github/workflows/ directory of a repository to be recognized as manifests. Any actions or workflows referenced using the syntax jobs[*].steps[*].uses or jobs.<job_id>.uses will be parsed as dependencies. For more information, see AUTOTITLE.

{% data reusables.dependabot.dependabot-alert-actions-semver %} For more information, see AUTOTITLE and AUTOTITLE.

3.2 KiB Raw Blame History

3.2 KiB

Raw Blame History