Supported Ecosystems

The table below provides the following information about each ecosystem that Code Insight supports in the Automated Analysis process:

•

Language/File Type—The code language or file type supported by the ecosystem.

•

Package—The name of a package type in the ecosystem.

•

Registry—The URL for the public registry or repository that hosts the package type.

•

Manifest File—The file for which the Code Insight scan searches to locate a package of this type.

•

Top-level Inv.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).

•

Direct Dep., Trans. Dep.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan detects the direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies) of the component’s top-level inventory.

•

Notes—Link to notes (if available) pertaining to Code Insight’s support of the specific ecosystem.

Supported Ecosystems

Language/File Type	Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
BitBake, BitBake recipe	Yocto	N/A	.bb		N/A	N/A	See Yocto Ecosystems.
C++, FORTRAN, Java, JavaScript, Lua, Python, R, Ruby, Scala	Conda	https://anaconda.org/	index.json			—	See Conda Ecosystems.
DLL/EXE	PE Header	N/A	.dll, .exe		N/A	N/A	—
Go	glide	https://pkg.go.dev/	glide.yaml		—	—	See Go Ecosystems.
	godep		godeps.json		—	—
	govendor		vendor.json		—	—
	module		go.mod _go.mod
			go.sum	—
Java	Gradle	http://search.maven.org/	build.gradle				—
	Maven		pom.xml				—
JavaScript	Bower	https://registry.bower.io/packages/	bower.json			—	—
			.bower.json			—	—
			package.json			—	—
.NET	NuGet	https://api.nuget.org/v3-flatcontainer/	.csproj				The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see .NET Ecosystems.
			.nupkg
			.nuspec
NodeJS	NPM	https://registry.npmjs.org/	package.json package-lock.json OR npm-shrinkwrap.json				See NPM Ecosystems.
	Yarn	https://registry.npmjs.org/	package.json yarn.lock			—	See Yarn Ecosystems.
PHP	Composer	https://packagist.org/	composer.json			—	—
			composer.lock			—	—
Python	PyPI	https://pypi.org/	PKG-INFO		—	—	See PyPI Ecosystems.
			requirements.txt	N/A		—
			setup.py			—
			.whl			—
			.egg			—
RPM	RPM Header	N/A	.rpm		N/A	N/A	—
Ruby	Gem	https://rubygems.org/api/v1	.gem			—	The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see Ruby Ecosystems.
			Gemfile			—
			.gemspec			—
Rust	Cargo	https://crates.io/	Cargo.toml		—	—	See Cargo Ecosystems.
			.crate		—	—
Swift, Obj-C	CocoaPods	N/A	Podfile.lock		—	—	—
			.podspec			—	—
Various	Git Repo	https://github.com	config		—	—	See Git Ecosystems.