Go Modules

git-pkgs is built from a set of Go libraries that handle different aspects of dependency management. Each library is independently usable if you’re building your own tooling.

• manifests parses lockfiles and manifest files to extract dependency information
• managers wraps package manager CLIs behind a common interface for install, add, update, and remove
• registries fetches package metadata from registry APIs
• enrichment combines registry and ecosyste.ms lookups behind a single interface
• vulns queries vulnerability databases (OSV, NVD, GitHub Advisories) with PURL-based lookups
• purl handles Package URL parsing and generation
• vers parses version ranges across different ecosystem syntaxes
• spdx normalizes and validates license expressions