Class: Dependabot::DependencyGraphers::ManifestGroup

Inherits:
T::ImmutableStruct
  • Object
show all
Defined in:
lib/dependabot/dependency_graphers/base.rb

Overview

A manifest group is a subset of a directory's dependency files that stands on its own as a valid parser input, plus the single file that the group's dependencies should be attributed to.

  • primary is the attribution target (the file that owns the group's dependencies in the snapshot).
  • files is everything the parser needs to resolve the group, including the primary and any sibling files pulled in only to satisfy cross-references.

Most ecosystems have exactly one group per directory (a manifest + optional lockfile).

Ecosystems where multiple independent manifests routinely share a directory override manifest_groups to return one group per independent manifest using ecosystem-specific rules (e.g. Python layered requirements)