Skip to content

Project Ideas Add Additional Package Parsers

Philippe Ombredanne edited this page Mar 5, 2020 · 2 revisions

Add additional package metadata + lockfile parsers

[NOTE: this has MOSTLY already been implemented]

The goal of this project is to add additional package metadata and lockfile parsers to scancode-toolkit. We currently handle various package metadata formats, like npm (package.json), but we need to add more parsers to handle more types of packages.

At a minimum, the project would include the handling of:

  • Python packages (setup.py, .whl, requirements.txt)
  • package-lock.json/npm-shrinkwrap.json
  • Ruby Gems (Gemfile, Gemfile.lock)
  • Java Jars
  • PHP Composer Packages
  • Debian .deb files/Yum .rpm files
Clone this wiki locally