Supported Ecosystems

The table below provides the following information about each ecosystem that Code Insight supports in the Automated Analysis process:

• Language/File Type—The code language or file type supported by the ecosystem.

• Package—The name of a package type in the ecosystem.

• Registry—The URL for the public registry or repository that hosts the package type.

• Manifest File—The file for which the Code Insight scan searches to locate a package of this type.

• Top-level Inv.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).

• Direct Dep., Trans. Dep.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan detects the direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies) of the component’s top-level inventory.

• Notes—Link to notes (if available) pertaining to Code Insight’s support of the specific ecosystem.

  Language/File Type	Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
  BitBake, BitBake recipe	Yocto	N/A	.bb		N/A	N/A	See Yocto Ecosystems.
  C, C++	Debian	https://tracker\.debian\.org https://www\.debian\.org​	.deb		N/A	N/A	See Debian Ecosystems.
  Conan	https://conan\.io/center​	conanfile.py			N/A	See Conan Ecosystems.
  conanfile.txt		N/A	N/A
  Implementation Files	N/A	.c		N/A	N/A	See C/C++ Ecosystems.
  .cpp		N/A	N/A
  .cxx		N/A	N/A
  .cc		N/A	N/A
  .h		N/A	N/A
  .hpp		N/A	N/A
  .hxx		N/A	N/A
  .hh		N/A	N/A
  C++, FORTRAN, Java, JavaScript, Lua, Python, R, Ruby, Scala	Conda	https://anaconda\.org/​	index.json			—	See Conda Ecosystems.
  DLL/EXE	PE Header	N/A	.dll, .exe		N/A	N/A	—
  Go	glide	https://pkg\.go\.dev/​	glide.yaml		—	—	See Go Ecosystems.
  godep	godeps.json		—	—
  govendor	vendor.json		—	—
  module	go.mod _go.mod
  go.sum	—
  Java	Gradle	http://search\.maven\.org/​	build.gradle				See Gradle Ecosystems.
  build.gradle.kts
  *.versions.toml	N/A
  Maven		pom.xml				See Maven Ecosystems.
  	.jar
  	.pom
  JavaScript	Bower	https://registry\.bower\.io/packages/​	bower.json			—	—
  .bower.json			—	—
  package.json			—	—
  .NET	NuGet	https://api\.nuget\.org/v3\-flatcontainer/	.csproj				The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see .NET Ecosystems.
  Directory.Build.targets Directory.Build.props and Directory.Packages.Props	N/A
  .nupkg
  .nuspec
  NodeJS	NPM	https://registry\.npmjs\.org/​	package.json<br />package-lock.json<br />OR<br />npm-shrinkwrap.json				See NPM Ecosystems.
  Yarn	https://registry\.npmjs\.org/​	package.json yarn.lock			—	See Yarn Ecosystems.
  PHP	Composer	https://packagist\.org/​	composer.json			—	—
  composer.lock			—	—
  Python	PyPI	https://pypi\.org/​	PKG-INFO		—	—	See PyPI Ecosystems.
  requirements.txt	N/A
  setup.py
  .whl
  .egg
  *.dist-info (METADATA)
  pyproject.toml
  RPM	RPM Header	N/A	.rpm		N/A	N/A	See RPM Ecosystems.
  .spec		N/A	N/A
  Ruby	Gem	https://rubygems\.org/api/v1​	.gem			—	The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see Ruby Ecosystems.
  Gemfile			—
  .gemspec			—
  Rust	Cargo	https://crates\.io/​	Cargo.toml		—	—	See Cargo Ecosystems.
  .crate		—	—
  Swift, Obj-C	CocoaPods	https://cocoapods\.org/​	Podfile.lock				See Cocoapod Ecosystems.
  .podspec
  Various	Git Repo	https://github\.com​	config		—	—	See Git Ecosystems.