advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard

Add support for Elixir Ecosystem for dependency graphs since the package manager hex.pm is already used for Erlang

Open SupaMic opened this issue 2 years ago • 11 comments

You already support Erlang (registry: https://hex.pm/) to build dependency graphs so you should implement the same functionality for Elixir projects which use the mix.exs script in root of a project (and within nested application root folders) and they mostly use the same registry; hex.pm (although they can link to github or or other repos directly)

SupaMic avatar Jan 31 '23 23:01 SupaMic

Would love this, please consider adding Elixir to the supported ecosystems

yammine avatar Feb 01 '23 01:02 yammine

Would love this too, please.

cj1128 avatar Feb 01 '23 01:02 cj1128

Is this open source? Can we do something to implement the dependency graph for elixir?

pgbezerra avatar Feb 01 '23 04:02 pgbezerra

👋 Hi from the dependency graph team -- Elixir support is near the top of our list for additional ecosystems to support, but we don't currently have a timeline.

Our core isn't open source, but we do have the dependency submission API that can submit dependencies for other ecosystems. Some folks have created GitHub Actions to do this for various ecosystems -- if anyone wants to go that route, we have the dependency submission toolkit that can help with developing actions for dependency submission. You'll receive Dependabot alerts for any submitted dependencies. Hope this helps a bit!

courtneycl avatar Feb 01 '23 16:02 courtneycl

Good to know you're working on it. It'll truly help having it.

dimitarvp avatar Feb 01 '23 19:02 dimitarvp

Interesting, It'll truly useful and help.

dnovais avatar Feb 02 '23 02:02 dnovais

Really, if it supports Erlang, it should support Elixir, after all, the Elixir people wrote hex.pm.

binarytemple avatar Feb 02 '23 12:02 binarytemple

I'd also like to support this feature request. Actually, there are several languages which run on the Erlang VM. Ideally, the graphs would support most of them. And a pony... :-)

RichMorin avatar Feb 03 '23 00:02 RichMorin

Would love to see Elixir support too

InFo555 avatar Mar 18 '23 00:03 InFo555