Supported ecosystems
OPPSY can parse lock files from five package ecosystems. When creating a manifest you specify the manifest_type value that tells the backend which parser to use.
| Ecosystem | manifest_type | Lock file |
|---|---|---|
| Rust | Cargo | Cargo.lock — generated automatically by Cargo on every build. |
| Node.js (npm) | Npm | package-lock.json — committed alongside package.json in npm projects. |
| Python (uv) | Uv | uv.lock — generated by the uv package manager. |
| Python (Poetry) | Poetry | poetry.lock — generated by Poetry. |
| Go | Go | JSON produced by running go list -m -json all | jq -s '.'. Unlike the others this is not a committed file — you generate it on demand. |