Go Modules
Go Modules
git-pkgs is built from a set of Go libraries that handle different aspects of dependency management. Each library is independently usable if you’re building your own tooling.
- archives reads and browses archive files in memory
- changelog parses changelog files into structured entries
- enrichment combines registry and ecosyste.ms lookups behind a single interface
- forges fetches repository metadata from git forges
- gitignore matches paths against gitignore rules
- managers wraps package manager CLIs behind a common interface for install, add, update, and remove
- manifests parses lockfiles and manifest files to extract dependency information
- platforms translates platform identifiers across package ecosystems
- purl handles Package URL parsing and generation
- registries fetches package metadata from registry APIs
- spdx normalizes and validates license expressions
- vers parses version ranges across different ecosystem syntaxes
- vulns queries vulnerability databases (OSV, NVD, GitHub Advisories) with PURL-based lookups
In-memory archive reading
Changelog file parsing
Package metadata enrichment
Git forge API clients
Gitignore pattern matching
Package manager CLI wrapper
Manifest and lockfile parsing
Cross-ecosystem platform mapping
Package URL handling
Registry API clients
SPDX license utilities
Version range parsing
Vulnerability database queries