Supported Ecosystems

The table below provides the following information about each ecosystem that Code Insight supports in the Automated Analysis process:

• Language/File Type—The code language or file type supported by the ecosystem.

• Package—The name of a package type in the ecosystem.

• Registry—The URL for the public registry or repository that hosts the package type.

• Manifest File—The file for which the Code Insight scan searches to locate a package of this type.

• Top-level Inv.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).

• Direct Dep., Trans. Dep.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan detects the direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies) of the component’s top-level inventory.

• Notes—Link to notes (if available) pertaining to Code Insight’s support of the specific ecosystem.

  Language/File Type	Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
  BitBake, BitBake recipe	Yocto	N/A	.bb		N/A	N/A	See Yocto Ecosystems.
  C, C++	Debian	https://tracker.debian.org https://www.debian.org​	.deb		N/A	N/A	See Debian Ecosystems.
  	Conan	https://conan.io/center​	conanfile.py			N/A	See Conan Ecosystems.
  		https://conan.io/center	conanfile.txt		N/A	N/A
  	Implementation Files	N/A	.c		N/A	N/A	See C/C++ Ecosystems.
  			.cpp		N/A	N/A
  			.cxx		N/A	N/A
  			.cc		N/A	N/A
  			.h		N/A	N/A
  			.hpp		N/A	N/A
  			.hxx		N/A	N/A
  			.hh		N/A	N/A
  C++, FORTRAN, Java, JavaScript, Lua, Python, R, Ruby, Scala	Conda	https://anaconda.org/​	index.json			—	See Conda Ecosystems.
  DLL/EXE	PE Header	N/A	.dll, .exe		N/A	N/A	—
  Go	glide	https://pkg.go.dev/​	glide.yaml		—	—	See Go Ecosystems.
  	godep		godeps.json		—	—
  	govendor		vendor.json		—	—
  	module		go.mod _go.mod
  			go.sum	—
  Java	Gradle	http://search.maven.org/​	build.gradle				See Gradle Ecosystems.
  			build.gradle.kts
  			*.versions.toml	N/A
  	Maven		pom.xml				See Maven Ecosystems.
  			.jar
  			.pom
  JavaScript	Bower	https://registry.bower.io/packages/​	bower.json			—	—
  			.bower.json			—	—
  			package.json			—	—
  .NET	NuGet	https://api.nuget.org/v3-flatcontainer/	.csproj				The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see .NET Ecosystems.
  			Directory.Build.targets, DirectoryBuild.props, and Directory.Packages.Props	N/A
  			.nupkg
  			.nuspec
  NodeJS	NPM	https://registry.npmjs.org/​	package.json, package-lock.json, OR npm-shrinkwrap.json				See NPM Ecosystems.
  	Yarn	https://registry.npmjs.org/​	package.json yarn.lock			—	See Yarn Ecosystems.
  PHP	Composer	https://packagist.org/​	composer.json			—	—
  			composer.lock			—	—
  Python	PyPI	https://pypi.org/​	PKG-INFO		—	—	See PyPI Ecosystems.
  			requirements.txt	N/A
  			setup.py
  			.whl
  			.egg
  			*.dist-info (METADATA)
  			pyproject.toml
  RPM	RPM Header	N/A	.rpm		N/A	N/A	See RPM Ecosystems.
  			.spec		N/A	N/A
  Ruby	Gem	https://rubygems.org/api/v1​	.gem			—	The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see Ruby Ecosystems.
  			Gemfile			—
  			.gemspec			—
  Rust	Cargo	https://crates.io/​	Cargo.toml		—	—	See Cargo Ecosystems.
  			.crate		—	—
  Swift, Obj-C	CocoaPods	https://cocoapods.org/​	Podfile.lock				See Cocoapod Ecosystems.
  			.podspec
  Various	Git Repo	https://github.com​	config		—	—	See Git Ecosystems.