Supported Ecosystems

The table below provides the following information about each ecosystem that Code Insight supports in the Automated Analysis process:

• Language/File Type—The code language or file type supported by the ecosystem.
• Package—The name of a package type in the ecosystem.
• Registry—The URL for the public registry or repository that hosts the package type.
• Manifest File—The file for which the Code Insight scan searches to locate a package of this type.
• Top-level Inv.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).
• Direct Dep., Trans. Dep.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan detects the direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies) of the component’s top-level inventory.
• Notes—Link to notes (if available) pertaining to Code Insight’s support of the specific ecosystem.

Supported Ecosystems

Language/File Type

Package

Registry

Manifest File

Top-level Inv.

Direct Dep.

Trans. Dep.

Notes

BitBake, BitBake recipe

Yocto

N/A

.bb

N/A

N/A

See Yocto Ecosystems.

C, C++

Debian

https://tracker.debian.org 

https://www.debian.org 

.deb

N/A

N/A

See Debian Ecosystems.

Conan

https://conan.io/center 

conanfile.py

N/A

See Conan Ecosystems.

conanfile.txt

N/A

N/A

Implementation Files

N/A

.c

N/A

N/A

See C/C++ Ecosystems.

.cpp

N/A

N/A

.cxx

N/A

N/A

.cc

N/A

N/A

.h

N/A

N/A

.hpp

N/A

N/A

.hxx

N/A

N/A

.hh

N/A

N/A

C++, FORTRAN, Java, JavaScript, Lua, Python, R, Ruby, Scala

Conda

https://anaconda.org/ 

index.json

—

See Conda Ecosystems.

DLL/EXE

PE Header

N/A

.dll, .exe

N/A

N/A

—

Go

glide

https://pkg.go.dev/ 

glide.yaml

—

—

See Go Ecosystems.

godep

godeps.json

—

—

govendor

vendor.json

—

—

module

go.mod

_go.mod

go.sum

—

Java

Gradle

http://search.maven.org/ 

build.gradle

See Gradle Ecosystems.

build.gradle.kts

*.versions.toml

N/A

Maven

 

pom.xml

See Maven Ecosystems.

 

.jar

 

.pom

JavaScript

Bower

https://registry.bower.io/packages/ 

bower.json

—

—

.bower.json

—

—

package.json

—

—

.NET

NuGet

https://api.nuget.org/v3-flatcontainer/ 

.csproj

The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component.

Also see .NET Ecosystems.

Directory.Build.targets
Directory.Build.props
and
Directory.Packages.Props

N/A

.nupkg

.nuspec

NodeJS

NPM

https://registry.npmjs.org/ 

package.json
package-lock.json
OR
npm-shrinkwrap.json

See NPM Ecosystems.

Yarn

https://registry.npmjs.org/ 

package.json

yarn.lock

—

See Yarn Ecosystems.

PHP

Composer

https://packagist.org/ 

composer.json

—

—

composer.lock

—

—

Python

PyPI

https://pypi.org/ 

PKG-INFO

—

—

See PyPI Ecosystems.

requirements.txt

N/A

setup.py

.whl

.egg

*.dist-info (METADATA)

 

pyproject.toml

 

RPM

RPM Header

N/A

.rpm

N/A

N/A

See RPM Ecosystems.

.spec

N/A

N/A

Ruby

Gem 

https://rubygems.org/api/v1 

.gem

—

The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component.

Also see Ruby Ecosystems.

Gemfile

—

.gemspec

—

Rust

Cargo

https://crates.io/ 

Cargo.toml

—

—

See Cargo Ecosystems.

.crate

—

—

Swift,
Obj-C

CocoaPods

https://cocoapods.org/ 

Podfile.lock

See Cocoapod Ecosystems.

.podspec

Various

Git Repo

https://github.com 

config

—

—

See Git Ecosystems.