Supported Ecosystems

These are the ecosystems that Code Insight supports in the Automated Analysis process.

The information is sorted per language/file type supported by the ecosystem. The tables show:

• Package—The name of a package type in the ecosystem.

• Registry—The URL for the public registry or repository that hosts the package type.

• Manifest File—The file for which the Code Insight scan searches to locate a package of this type.

• Top-level Inv.—The indicator for "yes" or a dash (—) for "no", showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).

• Direct Dep., Trans. Dep.—The indicator for "yes" or a dash (—) for "no", showing whether the Code Insight scan detects the direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies) of the component’s top-level inventory.

• Notes—Link to notes (if available) pertaining to Code Insight’s support of the specific ecosystem.

BitBake, BitBake recipe

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Yocto	N/A	.bb		N/A	N/A	Yocto Ecosystems

C++

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Debian	https://tracker.debian.org https://www.debian.org​	.deb		N/A	N/A	Debian Ecosystems
Conan	https://conan.io/center​	conanfile.py			N/A	Conan Ecosystems
	https://conan.io/center	conanfile.txt		N/A	N/A
Implement. Files	N/A	.c		N/A	N/A	C/C++ Ecosystems
		.cpp		N/A	N/A
		.cxx		N/A	N/A
		.cc		N/A	N/A
		.h		N/A	N/A
		.hpp		N/A	N/A
		.hxx		N/A	N/A
		.hh		N/A	N/A
Makefiles	N/A	Makefile		-	-	Makefiles
		CMakeLists.txt		-	-
		configure.ac		-	-
		configure.in		-	-
		Makefile.am		-	-
		Makefile.in		-	-

C++, FORTRAN, Java, JavaScript, Lua, Python, R, Ruby, Scala

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Conda	https://anaconda.org/​	index.json			—	Conda Ecosystems

DLL/EXE

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
PE Header	N/A	.dll, .exe		N/A	N/A	—

Go

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
glide	https://pkg.go.dev/​	glide.yaml		—	—	Go Ecosystems
godep		godeps.json		—	—
govendor		vendor.json		—	—
module		go.mod _go.mod
		go.sum	—
gobinary		Go Binary *.exe			—

Java

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Gradle	http://search.maven.org/​	build.gradle				Gradle Ecosystems
		build.gradle.kts
		*.versions.toml	N/A
Maven		pom.xml				Maven Ecosystems
		.jar
		.pom

JavaScript

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Bower	https://registry.bower.io/packages/​	bower.json			—	—
		.bower.json			—	—
		package.json			—	—

.NET

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
NuGet	https://api.nuget.org/v3-flatcontainer/	.csproj				The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see .NET Ecosystems.
		Directory.Build.targets, DirectoryBuild.props, and Directory.Packages.Props	N/A
		.nupkg
		.nuspec

Node.js

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
NPM	https://registry.npmjs.org/​	package.json, package-lock.json, OR npm-shrinkwrap.json				NPM Ecosystems
Yarn	https://registry.npmjs.org/​	package.json yarn.lock			—	Yarn Ecosystems

PHP

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Composer	https://packagist.org/​	composer.json			—	—
		composer.lock			—	—

Python

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
PyPI	https://pypi.org/​	PKG-INFO		—	—	PyPI Ecosystems
			requirements.txt	N/A
		setup.py
		.whl
		.egg
		*.dist-info (METADATA)
		pyproject.toml

RPM

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
RPM Header	N/A	.rpm		N/A	N/A	RPM Ecosystems.
		.spec		N/A	N/A

Ruby

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Gem	https://rubygems.org/api/v1​	.gem			—	The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also seeRuby Ecosystems.
		Gemfile			—
		.gemspec			—

Rust

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Cargo	https://crates.io/​	Cargo.toml				Cargo Ecosystems
		.crate
		Cargo.lock

Swift, Obj-C

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
CocoaPods	https://cocoapods.org/​	Podfile.lock				Cocoapod Ecosystems
		.podspec

Various

Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
Git Repo	https://github.com​	config		—	—	Git Ecosystems
HuggingFace	https://huggingface.co​	.py		—	—	Hugging Face Ecosystem
		.ipynb		—	—
		.js		—	—