Supported Ecosystems

The table below provides the following information about each ecosystem that Code Insight supports in the Automated Analysis process:

Language/File Type—The code language or file type supported by the ecosystem.
Package—The name of a package type in the ecosystem.
Registry—The URL for the public registry or repository that hosts the package type.
Manifest File—The file for which the Code Insight scan searches to locate a package of this type.
Top-level Inv.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).
Direct Dep., Trans. Dep.—If top-level inventory is supported, the discovery of this component’s direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies).
Notes—Specific information pertaining to Code Insight’s support of the ecosystem.

Supported Ecosystems

Language/File Type

Package

Registry

Manifest File

Top-level Inv.

Direct Dep.

Trans. Dep.

Notes

DLL/EXE

PE Header

N/A

.dll, .exe

N/A

N/A

 

Go

glide

https://go-search.org 

glide.yaml

 

 

See Notes for Supported Go Ecosystems.

godep

godeps.json

 

 

govendor

vendor.json

 

 

module

go.mod

 

 

Java

Gradle

http://search.maven.org/ 

build.gradle

 

Maven

pom.xml

 

JavaScript

Bower

https://registry.bower.io/packages/ 

bower.json

 

 

.bower.json

 

 

package.json

 

 

.NET

NuGet

https://api.nuget.org/v3-flatcontainer/ 

.nupkg

 

.nuspec

 

NodeJS

NPM

https://registry.npmjs.org/ 

package.json

 

PHP

Composer

https://packagist.org/ 

composer.json

 

 

composer.lock

 

 

RPM

RPM Header

N/A

.rpm

N/A

N/A

 

Ruby

Gem 

https://rubygems.org/api/v1/ 

.gem

 

See Notes for Supported Ruby Ecosystems.

Gemfile

 

.gemspec

 

Swift,
Obj-C

CocoaPods

N/A

Podfile.lock

 

 

 

.podspec