-
Many of the projects around image based linux would benefit from having standardized package manager dependency lockfiles.
I just created a proposal for the rpm / dnf ecosystem here: https://github.c…
malt3 updated
12 months ago
-
To reproduce, run:
```
$ opam source lwt.5.7.0
$ cd lwt.5.7.0
$ dune pkg lock
$ DUNE_CONFIG__TOOLCHAINS=enabled dune build
Error: Dependency cycle between:
- package base-bytes
-> _build/_p…
-
Apologies if I missed it but I looked through the documentation (README) and found some merge requests on the topic and it looks to me that Syft works with gradle lockfiles but not alternatives to dec…
-
Two important limitations with workspaces and lockfiles that have been brought by @jeanlauliac:
- Let's say we have ten different packages. We want all of them to live in their own repository so th…
-
https://github.com/astral-sh/uv
-
Looks if the configuration was removed its `lockfile` is left forever.
Maybe this is Gradle bug.
If not, we should provide a way to clean them. Including `buildSrc` project.
grv87 updated
5 years ago
-
I never use lockfiles for my modules, only for applications to make sure that the application that is built has the exact same dependencies as the one I tested everything with. Maybe we should add thi…
-
### Problem
When an Emacs buffer has been edited but not saved, Emacs generates a lock file in the form of a [symlink to a nonexistent file](https://www.gnu.org/software/emacs/manual/html_node/elisp/…
-
This is a continuation of #20. I'll provide a summary of the issue:
When using Nuxt layers and Node/PNPM workspaces, no lockfiles will be present in the directory of the Nuxt layer. This causes nux…
-
### What is your question?
test_requires packages (e.g. gtest) are entered as "requires" in the lockfiles and are therefore also part of the SBOM. I think such requires should not be included in the…