Here is a list of the package managers and the corresponding languages that SOOS scans.  We've integrated with the most popular package managers for each language.

  • Cargo - Rust
  • Composer - PHP
  • Dart PM (Pub Package Manager) - Dart
  • Go Modules - Go (GoLang)
  • Gradle - Java & Kotlin
  • Homebrew - (various languages)
  • Maven - Java
  • Mix - Elixir
  • NuGet - .NET
  • NPM (Node Package Manager) - Node 
  • PyPI - Python 
  • Rebar3 - Erlang
  • Ruby Gems - Ruby
  • Yarn - Node

Below is a list of the languages and corresponding manifest format(s) we support. 

If you are looking for a manifest format we don't currently support, drop us a line at support@soos.io.  We frequently add support for new package managers and manifests so we will add your request to our road map if it is not there already, or we will let you know when to expect it to be available!

  • .NET
    • packages.lock.json (lock file)
    • paket.lock (lock file)
    • packages.config 
    • csproj 
    • vbproj
    • project.assets.json 
    • paket.dependencies 
  • Dart
    • pubspec.yaml
    • pubspec.lock (lock file)
  • Elixir
    • mix.exs
    • mix.lock (lock file)
  • Erlang 
    • rebar.config
    • rebar.lock (lock file)
  • Go
    • go.mod
  •  Java
    • pom.xml
    • .pom
    • build.gradle**
    • gradle.lockfile
  • Kotlin
    • gradle.lockfile

    • build.gradle.kts**

  • Node
    • package.lock.json (lock file)
    • package.json 
    • yarn.lock (lock file)
  • PHP
    • composer.json
  • Python
    • pipfile.lock (lock file)
    • poetry.lock (lockfile)
    • pdm.lock (lockfile)
    • pipfile
    • pyproject.toml (Poetry & PDM)
    • .*req.*\\.txt 
  • Ruby
    • gemfile.lock (lock file)
    • gemfile 
  • Rust
    • cargo.toml
    • cargo.lock (lock file)

 

**Manifest formats build.gradle and build.gradle.kts do not support version variables or substitutions. If you are using either of these, consider using a lock file: Locking Dependency Versions