ort icon indicating copy to clipboard operation
ort copied to clipboard

Support getting Node-related tooling versions from the `frontend-gradle-plugin`

Open sschuberth opened this issue 1 year ago • 1 comments

What is the feature you want to request?

For analyzing Gradle projects that use the frontend-gradle-plugin, it would be nice if any configured Node.js, npm, pnpm, Yarn version would be adhered to by the ORT analyzer automatically.

Describe the solution you would like

This should ideally work transparently for the user, i.e. respective tool version should be bootstrapped if not yet present.

Alternatives you have considered

The mentioned package manager analyzers could also learn to accept manually provided versions, configured as part of .ort.yml, but that requires to maintain the configured tool version in two places, and does not solve the problem of bootstrapping them.

Additional context

See the discussion at https://github.com/nordic-institute/X-Road/pull/2172.

sschuberth avatar May 29 '24 12:05 sschuberth

Maybe a way forward could be to leverage nvm-rust to install the correct Node version on-the-fly, and then use Corepack to install the right Node package manager version.

sschuberth avatar Jun 09 '24 15:06 sschuberth

Closed as part of backlog grooming. Feel free to comment if you would like to contribute to this.

sschuberth avatar Nov 26 '24 09:11 sschuberth