This repository contains a collection of JS libraries for parsing package manager lockfiles and glue code to make them interoperable with golang. It uses v8go to execute the scripts and returns native types.
Parsers are available (checked) or planned for:
- JavaScript (snyk-nodejs-lockfile-parser)
- Swift (@snyk/cocoapods-lockfile-parser)
- Python (snyk-poetry-lockfile-parser)
- PHP (@snyk/composer-lockfile-parser)
TODO:
- Pre-compile the js bundle instead of executing it in each isolate.