Working with dependencies

In some cases, when working with dependencies, additional actions are required to improve the accuracy of composition analysis.

This section contains instructions and best practices for working with dependencies in different ecosystems, as well as a description of how CodeScoring works in non-standard dependency processing scenarios.

To check package identifiers in your own SBOM or one generated by another tool, see the PURL construction guidelines.

Supported ecosystems

Was this page helpful?