Deadpendency Language Support

Dependencies are currently only analyzed by Deadpendency when hosted on GitHub.com.

Deadpendency will load the dependency files of the top 2 programming languages used in a repository. It will only search 1 directory deep for these files, however additional dependency files can be loaded via config.

Languages

Programming Language	Supported	File Types	Default Files Loaded	Notes
JavaScript	✅	Npm package.json	./**/package.json
TypeScript	✅	Npm package.json	./**/package.json
Python	✅	Pip Requirements Setup Py Pipenv Pipfile Pyproject.toml	./**/requirements*.txt ./**/setup.py ./**/Pipfile ./**/pyproject.toml	Will not follow requirements.txt includes eg. -r other-requirements.txt. setup.py currently only supports basic use cases. pyproject.toml support includes basic, Poetry and Flit dependencies.
Ruby	✅	Bundler Gemfile Ruby Gemspec	./**/Gemfile ./**/*.gemspec	Git blocks not yet supported.
PHP	✅	Composer file	./**/composer.json	VCS dependencies not yet supported.
Rust	✅	Cargo file	./**/Cargo.toml	Some dependency types not detected.
Haskell	✅	Cabal file Hpack package.yaml	./**/*.cabal ./**/package.yaml	There are some current limitations.
.NET	✅	PackageReference in project file	./**/*.csproj ./**/*.vbproj	packages.config format is not supported.
Java	✅	Maven pom.xml Gradle Build File	./**/pom.xml ./**/build.gradle	Maven packages often don't reference the source repository.
Kotlin	✅	Maven pom.xml Gradle Build File Gradle Kotlin DSL File	./**/pom.xml ./**/build.gradle ./**/build.gradle.kts	Maven packages often don't reference the source repository.
Scala	✅	Sbt build.sbt	./**/build.sbt	Scala support is new and can be considered beta. Currently has some limitations.
Go	✅	Go module file	./**/go.mod	Repository is inferred based on the dependency name as pkg.go.dev API does not reference the source repository.
Others	❔			If you want a language supported please open an issue.