ecosystems-bibliothecary 15.1.1 → 15.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 49988f4a70c1d5dcf6b7c05bffba8d885b3e63f04545f0c524d32b46de0804f2
-  data.tar.gz: 121b4e75f934770b9967b0e3b2427ddc1dc6aaaa19f8ed0d72f1001e50d4d575
+  metadata.gz: c1399499146bc9abb6b2053d1e842cff2a33e05166f4fca7fed6fba222146f5e
+  data.tar.gz: 2b1460ba23303796a1b73bfa445fee11771857f5270effce6da04e6ed4ff920f
 SHA512:
-  metadata.gz: 227adbf47ce52d6a9bb70be154f0cc204f5f327b68adeb8c91fd2e668036359eebd07d3fb940f0d4eef00128af04fb2073304147b9285589917efef1b1d5d5cf
-  data.tar.gz: ca3b36ddfa71702dae9737500dcf09ad6a9e6c4daf5758738c793614bcdcbd730a50083d081ee45a899536b0f01c1bd7d4eef90117cc3c1aeee6063a780e0b3f
+  metadata.gz: 2ab9631fd2e5472d6a60784685252961f75fcae716561d1e7bd6c1bc7f87bba18f346988b26f787cc13bd666fc06a99db133926726880ee983e01fbe4f64a5d9
+  data.tar.gz: 1dc6d4efca6e8b643ca7c76e495a6b40364169fc8b51d238f2708e5da1ec8d04515adafec8d2042951088729258b3552a547473c93a59ae3f12c7a89ff681065

data/CHANGELOG.md

@@ -13,6 +13,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 
+## [15.2.0]
+
+### Added
+
+- Deno parser for deno.json, deno.jsonc, and deno.lock files (supports npm: and jsr: specifiers)
+- Nix parser for flake.nix, flake.lock, nix/sources.json (niv), and npins/sources.json (npins)
+- Gleam support in Hex parser for gleam.toml and manifest.toml
+- Rebar3 support in Hex parser for rebar.lock
+- Julia Project.toml and Manifest.toml support
+- Hackage cabal.project.freeze support
+
 ## [15.1.1]
 
 ### Added

data/README.md

@@ -44,164 +44,177 @@ All available config options are in: https://github.com/ecosyste-ms/bibliothecar
 
 ## Supported package manager file formats
 
-- npm
-  - package.json
-  - package-lock.json
-  - npm-shrinkwrap.json
-  - yarn.lock
-  - pnpm-lock.yaml
-  - bun.lock
-  - npm-ls.json
-- Maven
-  - pom.xml
-  - ivy.xml
-  - build.gradle
-  - build.gradle.kts
-  - gradle-dependencies-q.txt
-  - maven-resolved-dependencies.txt
-  - sbt-update-full.txt
-  - maven-dependency-tree.txt
-  - maven-dependency-tree.dot
-  - gradle.lockfile
-  - verification-metadata.xml
-- RubyGems
-  - Gemfile
-  - Gemfile.lock
-  - gems.rb
-  - gems.locked
-  - *.gemspec
-- Packagist
-  - composer.json
-  - composer.lock
-- PyPi
-  - setup.py
-  - req*.txt
-  - req*.pip
-  - requirements/*.txt
-  - requirements/*.pip
-  - requirements.frozen
-  - Pipfile
-  - Pipfile.lock
-  - pyproject.toml
-  - poetry.lock
-  - uv.lock
-  - pylock.toml
-  - pdm.lock
-  - pip-resolved-dependencies.txt
-  - pip-dependency-graph.json
-- Nuget
-  - packages.config
-  - packages.lock.json
-  - Project.json
-  - Project.lock.json
-  - *.nuspec
-  - paket.lock
-  - *.csproj
-  - project.assets.json
-  - \*.deps.json
-- Bower
-  - bower.json
-- BentoML
-  - bentofile.yaml
-- CPAN
-  - META.json
-  - META.yml
-  - cpanfile
-  - cpanfile.snapshot
-  - Makefile.PL
-  - Build.PL
-- CocoaPods
-  - Podfile
-  - Podfile.lock
-  - *.podspec
-  - *.podspec.json
+- Actions
+  - action.yml
+  - action.yaml
+  - .github/workflows/\*.yml
+  - .github/workflows/\*.yaml
 - Anaconda
   - environment.yml
   - environment.yaml
+- BentoML
+  - bentofile.yaml
+- Bower
+  - bower.json
+- Cargo
+  - Cargo.toml
+  - Cargo.lock
+- Carthage
+  - Cartfile
+  - Cartfile.private
+  - Cartfile.resolved
 - Clojars
   - project.clj
+- CocoaPods
+  - Podfile
+  - \*.podspec
+  - Podfile.lock
+  - \*.podspec.json
 - Cog
   - cog.yaml
 - Conan
   - conanfile.py
   - conanfile.txt
   - conan.lock
-- Meteor
-  - versions.json
-- MLflow
-  - MLmodel
+- CPAN
+  - META.json
+  - META.yml
+  - cpanfile
+  - cpanfile.snapshot
+  - Makefile.PL
+  - Build.PL
 - CRAN
   - DESCRIPTION
   - renv.lock
-- Cargo
-  - Cargo.toml
-  - Cargo.lock
-- Hex
-  - mix.exs
-  - mix.lock
-- Swift
-  - Package.swift
-  - Package.resolved
-- Pub
-  - pubspec.yaml
-  - pubspec.lock
-- Carthage
-  - Cartfile
-  - Cartfile.private
-  - Cartfile.resolved
+- Deno
+  - deno.json
+  - deno.jsonc
+  - deno.lock
+- Docker
+  - docker-compose\*.yml
+  - Dockerfile
 - Dub
   - dub.json
   - dub.sdl
-- Julia
-  - REQUIRE
-- Shards
-  - shard.yml
-  - shard.lock
+- DVC
+  - dvc.yaml
+- Elm
+  - elm-package.json
+  - elm_dependencies.json
+  - elm-stuff/exact-dependencies.json
 - Go
+  - go.mod
+  - go.sum
   - glide.yaml
   - glide.lock
-  - Godeps
   - Godeps/Godeps.json
+  - Godeps
   - vendor/manifest
   - vendor/vendor.json
   - Gopkg.toml
   - Gopkg.lock
-  - go.mod
-  - go.sum
   - go-resolved-dependencies.json
-- Elm
-  - elm-package.json
-  - elm_dependencies.json
-  - elm-stuff/exact-dependencies.json
-- Haxelib
-  - haxelib.json
 - Hackage
   - \*.cabal
-  - cabal.config
+  - \*cabal.config
   - stack.yaml.lock
-- Actions
-  - action.yml
-  - action.yaml
-  - .github/workflows/*.yml
-  - .github/workflows/*.yaml
-- Docker
-  - Dockerfile
-  - docker-compose*.yml
-  - docker-compose*.yaml
-- DVC
-  - dvc.yaml
-- Vcpkg
-  - vcpkg.json
-  - _generated-vcpkg-list.json
+  - cabal.project.freeze
+- Haxelib
+  - haxelib.json
+- Hex
+  - mix.exs
+  - mix.lock
+  - gleam.toml
+  - manifest.toml
+  - rebar.lock
 - Homebrew
   - Brewfile
   - Brewfile.lock.json
-- Ollama
-  - Modelfile
-- Nimble
-  - \*.nimble
+- Julia
+  - REQUIRE
+  - Project.toml
+  - Manifest.toml
 - LuaRocks
   - \*.rockspec
+- Maven
+  - ivy.xml
+  - pom.xml
+  - build.gradle
+  - build.gradle.kts
+  - gradle-dependencies-q.txt
+  - maven-resolved-dependencies.txt
+  - sbt-update-full.txt
+  - maven-dependency-tree.txt
+  - maven-dependency-tree.dot
+  - gradle.lockfile
+  - verification-metadata.xml
+- Meteor
+  - versions.json
+- MLflow
+  - MLmodel
+- Nimble
+  - \*.nimble
+- Nix
+  - flake.nix
+  - flake.lock
+  - nix/sources.json
+  - npins/sources.json
+- npm
+  - package.json
+  - package-lock.json
+  - npm-shrinkwrap.json
+  - yarn.lock
+  - pnpm-lock.yaml
+  - bun.lock
+  - npm-ls.json
+- Nuget
+  - Project.json
+  - Project.lock.json
+  - packages.lock.json
+  - packages.config
+  - \*.nuspec
+  - \*.csproj
+  - paket.lock
+  - project.assets.json
+  - \*.deps.json
+- Ollama
+  - Modelfile
+- Packagist
+  - composer.json
+  - composer.lock
+- Pub
+  - pubspec.yaml
+  - pubspec.lock
+- PyPi
+  - setup.py
+  - requirements\*.txt
+  - requirements\*.pip
+  - requirements\*.in
+  - requirements.frozen
+  - Pipfile
+  - Pipfile.lock
+  - pyproject.toml
+  - poetry.lock
+  - uv.lock
+  - pylock.toml
+  - pdm.lock
+  - pip-resolved-dependencies.txt
+  - pip-dependency-graph.json
+- RubyGems
+  - Gemfile
+  - Gemfile.lock
+  - gems.rb
+  - gems.locked
+  - \*.gemspec
+- Shards
+  - shard.yml
+  - shard.lock
+- Swift
+  - Package.swift
+  - Package.resolved
+- Vcpkg
+  - vcpkg.json
+  - _generated-vcpkg-list.json
 
 ## Development
 

data/lib/bibliothecary/analyser.rb

@@ -43,6 +43,10 @@ module Bibliothecary
         @platform_name ||= name.to_s.split("::").last.downcase.freeze
       end
 
+      def file_patterns
+        []
+      end
+
       def map_dependencies(hash, key, type, source = nil)
         hash.fetch(key, []).map do |name, requirement|
           Dependency.new(

data/lib/bibliothecary/parsers/actions.rb

@@ -7,6 +7,10 @@ module Bibliothecary
 
       WORKFLOW_REGEX = /^\.github\/workflows\/.*.y(a)?ml/
 
+      def self.file_patterns
+        ["action.yml", "action.yaml", ".github/workflows/*.yml", ".github/workflows/*.yaml"]
+      end
+
       def self.mapping
         {
           match_filenames("action.yml","action.yaml") => {

data/lib/bibliothecary/parsers/bentoml.rb

@@ -5,6 +5,10 @@ module Bibliothecary
     class BentoML
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["bentofile.yaml"]
+      end
+
       def self.mapping
         {
           match_filename("bentofile.yaml") => {

data/lib/bibliothecary/parsers/bower.rb

@@ -7,6 +7,10 @@ module Bibliothecary
     class Bower
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["bower.json"]
+      end
+
       def self.mapping
         {
           match_filename("bower.json") => {

data/lib/bibliothecary/parsers/cargo.rb

@@ -5,6 +5,10 @@ module Bibliothecary
     class Cargo
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["Cargo.toml", "Cargo.lock"]
+      end
+
       def self.mapping
         {
           match_filename("Cargo.toml") => {

data/lib/bibliothecary/parsers/carthage.rb

@@ -15,6 +15,10 @@ module Bibliothecary
       # Group 4: unquoted requirement (e.g., >= 1.0, ~> 2.0)
       CARTFILE_REGEXP = /^(github|git|binary)\s+"([^"]+)"(?:\s+(?:"([^"]+)"|((?:>=|<=|~>|==|>|<)\s*[\d.]+)))?/
 
+      def self.file_patterns
+        ["Cartfile", "Cartfile.private", "Cartfile.resolved"]
+      end
+
       def self.mapping
         {
           match_filename("Cartfile") => {

data/lib/bibliothecary/parsers/clojars.rb

@@ -7,6 +7,10 @@ module Bibliothecary
       # Name can be like: org.clojure/clojure, cheshire, ring/ring-defaults
       DEPENDENCY_REGEXP = %r{\[([a-zA-Z0-9_./\-]+)\s+"([^"]+)"\]}
 
+      def self.file_patterns
+        ["project.clj"]
+      end
+
       def self.mapping
         {
           match_filename("project.clj") => {

data/lib/bibliothecary/parsers/cocoapods.rb

@@ -17,6 +17,10 @@ module Bibliothecary
       # Podspec pattern: .dependency "Name", "version"
       PODSPEC_DEPENDENCY = /\.dependency\s+['"]([^'"]+)['"]\s*(?:,\s*['"]([^'"]+)['"])?/
 
+      def self.file_patterns
+        ["Podfile", "*.podspec", "Podfile.lock", "*.podspec.json"]
+      end
+
       def self.mapping
         {
           match_filename("Podfile") => {

data/lib/bibliothecary/parsers/cog.rb

@@ -5,6 +5,10 @@ module Bibliothecary
     class Cog
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["cog.yaml"]
+      end
+
       def self.mapping
         {
           match_filename("cog.yaml") => {

data/lib/bibliothecary/parsers/conan.rb

@@ -5,6 +5,10 @@ module Bibliothecary
     class Conan
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["conanfile.py", "conanfile.txt", "conan.lock"]
+      end
+
       def self.mapping
         {
           match_filename("conanfile.py") => {

data/lib/bibliothecary/parsers/conda.rb

@@ -7,6 +7,10 @@ module Bibliothecary
     class Conda
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["environment.yml", "environment.yaml"]
+      end
+
       def self.mapping
         {
           match_filename("environment.yml") => {

data/lib/bibliothecary/parsers/cpan.rb

@@ -8,6 +8,10 @@ module Bibliothecary
     class CPAN
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["META.json", "META.yml", "cpanfile", "cpanfile.snapshot", "Makefile.PL", "Build.PL"]
+      end
+
       def self.mapping
         {
           match_filename("META.json", case_insensitive: true) => {

data/lib/bibliothecary/parsers/cran.rb

@@ -9,6 +9,10 @@ module Bibliothecary
 
       REQUIRE_REGEXP = /([a-zA-Z0-9\-_.]+)\s?\(?([><=\s\d.,]+)?\)?/
 
+      def self.file_patterns
+        ["DESCRIPTION", "renv.lock"]
+      end
+
       def self.mapping
         {
           match_filename("DESCRIPTION", case_insensitive: true) => {

data/lib/bibliothecary/parsers/deno.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+require "json"
+
+module Bibliothecary
+  module Parsers
+    class Deno
+      include Bibliothecary::Analyser
+
+      def self.file_patterns
+        ["deno.json", "deno.jsonc", "deno.lock"]
+      end
+
+      def self.mapping
+        {
+          match_filename("deno.json") => {
+            kind: "manifest",
+            parser: :parse_manifest,
+          },
+          match_filename("deno.jsonc") => {
+            kind: "manifest",
+            parser: :parse_manifest,
+          },
+          match_filename("deno.lock") => {
+            kind: "lockfile",
+            parser: :parse_lockfile,
+          },
+        }
+      end
+
+      def self.parse_manifest(file_contents, options: {})
+        manifest = JSON.parse(file_contents)
+        source = options.fetch(:filename, nil)
+
+        dependencies = manifest.fetch("imports", {}).map do |alias_name, specifier|
+          name, requirement = parse_specifier(specifier)
+          next unless name
+
+          Dependency.new(
+            name: name,
+            requirement: requirement,
+            type: "runtime",
+            source: source,
+            platform: platform_name
+          )
+        end.compact
+
+        ParserResult.new(dependencies: dependencies)
+      end
+
+      def self.parse_lockfile(file_contents, options: {})
+        manifest = JSON.parse(file_contents)
+        source = options.fetch(:filename, nil)
+
+        dependencies = manifest.fetch("specifiers", {}).map do |specifier, resolved_version|
+          name, _requirement = parse_specifier(specifier)
+          next unless name
+
+          Dependency.new(
+            name: name,
+            requirement: resolved_version,
+            type: "runtime",
+            source: source,
+            platform: platform_name
+          )
+        end.compact
+
+        ParserResult.new(dependencies: dependencies)
+      end
+
+      # Parses specifiers like:
+      #   "npm:chalk@1" => ["chalk", "1"]
+      #   "npm:chalk" => ["chalk", "*"]
+      #   "jsr:@std/path@^1" => ["@std/path", "^1"]
+      #   "jsr:@std/path" => ["@std/path", "*"]
+      def self.parse_specifier(specifier)
+        return nil unless specifier.start_with?("npm:", "jsr:")
+
+        # Remove the protocol prefix
+        without_protocol = specifier.sub(/^(npm|jsr):/, "")
+
+        # Handle scoped packages (@scope/name@version)
+        if without_protocol.start_with?("@")
+          # Split on @ but keep the first @ for the scope
+          parts = without_protocol[1..].split("@", 2)
+          name = "@#{parts[0]}"
+          requirement = parts[1] || "*"
+        else
+          # Regular package (name@version)
+          name, requirement = without_protocol.split("@", 2)
+          requirement ||= "*"
+        end
+
+        [name, requirement]
+      end
+    end
+  end
+end

data/lib/bibliothecary/parsers/docker.rb

@@ -8,6 +8,10 @@ module Bibliothecary
 
       DOCKER_COMPOSE_REGEXP = /docker-compose[a-zA-Z0-9\-_\.]*\.yml$/
 
+      def self.file_patterns
+        ["docker-compose*.yml", "Dockerfile"]
+      end
+
       def self.mapping
         {
           lambda { |p| DOCKER_COMPOSE_REGEXP.match(p) } => {

data/lib/bibliothecary/parsers/dub.rb

@@ -9,6 +9,10 @@ module Bibliothecary
 
       SDL_DEPENDENCY_REGEXP = /^dependency\s+"([^"]+)"(?:\s+version="([^"]+)")?/
 
+      def self.file_patterns
+        ["dub.json", "dub.sdl"]
+      end
+
       def self.mapping
         {
           match_filename("dub.json") => {

data/lib/bibliothecary/parsers/dvc.rb

@@ -5,6 +5,10 @@ module Bibliothecary
     class DVC
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["dvc.yaml"]
+      end
+
       def self.mapping
         {
           match_filename("dvc.yaml") => {

data/lib/bibliothecary/parsers/elm.rb

@@ -7,6 +7,10 @@ module Bibliothecary
     class Elm
       include Bibliothecary::Analyser
 
+      def self.file_patterns
+        ["elm-package.json", "elm_dependencies.json", "elm-stuff/exact-dependencies.json"]
+      end
+
       def self.mapping
         {
           match_filenames("elm-package.json", "elm_dependencies.json") => {

data/lib/bibliothecary/parsers/go.rb

@@ -18,6 +18,10 @@ module Bibliothecary
       GOMOD_MULTILINE_END_REGEXP = /^\)/
       GOSUM_REGEXP = /^(.+)\s+(.+)\s+(.+)$/
 
+      def self.file_patterns
+        ["go.mod", "go.sum", "glide.yaml", "glide.lock", "Godeps/Godeps.json", "Godeps", "vendor/manifest", "vendor/vendor.json", "Gopkg.toml", "Gopkg.lock", "go-resolved-dependencies.json"]
+      end
+
       def self.mapping
         {
           # Go Modules (recommended)