Supported Ecosystems

The table below provides the following information about each ecosystem that Code Insight supports in the Automated Analysis process:

• Language/File Type—The code language or file type supported by the ecosystem.

• Package—The name of a package type in the ecosystem.

• Registry—The URL for the public registry or repository that hosts the package type.

• Manifest File—The file for which the Code Insight scan searches to locate a package of this type.

• Top-level Inv.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan supports the detection of third-party software in the package (displayed as top-level inventory).

• Direct Dep., Trans. Dep.—The indicator for “yes” or a dash (—) for “no”, showing whether the Code Insight scan detects the direct (first-level) dependencies and transitive dependencies (that is, dependencies of dependencies) of the component’s top-level inventory.

• Notes—Link to notes (if available) pertaining to Code Insight’s support of the specific ecosystem.

Language/File Type	Package	Registry	Manifest File	Top-level Inv.	Direct Dep.	Trans. Dep.	Notes
BitBake, BitBake recipe	Yocto	N/A	.bb		N/A	N/A	See Yocto Ecosystems.
C, C++	Debian	https://tracker\.debian\.org https://www\.debian\.org​	.deb		N/A	N/A	See Debian Ecosystems.
Conan	https://conan\.io/center​	conanfile.py			N/A	See Conan Ecosystems.
conanfile.txt		N/A	N/A
Implementation Files	N/A	.c		N/A	N/A	See C/C++ Ecosystems.
.cpp		N/A	N/A
.cxx		N/A	N/A
.cc		N/A	N/A
.h		N/A	N/A
.hpp		N/A	N/A
.hxx		N/A	N/A
.hh		N/A	N/A
C++, FORTRAN, Java, JavaScript, Lua, Python, R, Ruby, Scala	Conda	https://anaconda\.org/​	index.json			—	See Conda Ecosystems.
DLL/EXE	PE Header	N/A	.dll, .exe		N/A	N/A	—
Go	glide	https://pkg\.go\.dev/​	glide.yaml		—	—	See Go Ecosystems.
godep	godeps.json		—	—
govendor	vendor.json		—	—
module	go.mod _go.mod
go.sum	—
Java	Gradle	http://search\.maven\.org/​	build.gradle				See Gradle Ecosystems.
build.gradle.kts
*.versions.toml	N/A
Maven		pom.xml				See Maven Ecosystems.
	.jar
	.pom
JavaScript	Bower	https://registry\.bower\.io/packages/​	bower.json			—	—
.bower.json			—	—
package.json			—	—
.NET	NuGet	https://api\.nuget\.org/v3\-flatcontainer/	.csproj				The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see .NET Ecosystems.
Directory.Build.targets and Directory.Build.props	N/A
.nupkg
.nuspec
NodeJS	NPM	https://registry\.npmjs\.org/​	package.json<br /><br />package-lock.json<br />OR<br />npm-shrinkwrap.json				See NPM Ecosystems.
Yarn	https://registry\.npmjs\.org/​	package.json yarn.lock			—	See Yarn Ecosystems.
PHP	Composer	https://packagist\.org/​	composer.json			—	—
composer.lock			—	—
Python	PyPI	https://pypi\.org/​	PKG-INFO		—	—	See PyPI Ecosystems.
requirements.txt	N/A
setup.py
.whl
.egg
*.dist-info (METADATA)
RPM	RPM Header	N/A	.rpm		N/A	N/A	See RPM Ecosystems.
.spec		N/A	N/A
Ruby	Gem	https://rubygems\.org/api/v1​	.gem			—	The registry URL provided is a parent URL and will not work as is. Provide the fully formed URL to access the appropriate component. Also see Ruby Ecosystems.
Gemfile			—
.gemspec			—
Rust	Cargo	https://crates\.io/​	Cargo.toml		—	—	See Cargo Ecosystems.
.crate		—	—
Swift, Obj-C	CocoaPods	https://cocoapods\.org/​	Podfile.lock				See Cocoapod Ecosystems.
.podspec
Various	Git Repo	https://github\.com​	config		—	—	See Git Ecosystems.