Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Collecting dependencies data for top GitHub projects based on GitHub API #1682

Open
xiaoya-yaya opened this issue Feb 25, 2025 · 0 comments
Labels
waiting for repliers need other's feedback

Comments

@xiaoya-yaya
Copy link
Member

Description

Many top-level open source projects on GitHub have enabled the 'Dependency Graph' feature on GitHub.

Take vLLM as an example, here is the SBOM dependency graph that I believe applied the SPDX standard: https://github.com/vllm-project/vllm/network/dependencies, and such dependency data could be accessed through GitHub API: https://api.github.com/repos/vllm-project/vllm/dependency-graph/sbom.

Could OpenDigger continuously collect such data for top-level OpenRank projects? Such data would be instrumental for the ecosystem correlation analysis.

@github-actions github-actions bot added the waiting for repliers need other's feedback label Feb 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
waiting for repliers need other's feedback
Projects
None yet
Development

No branches or pull requests

1 participant