3 个仓库
Mappings between source-level package definitions and their corresponding binary distributions.
Distinct from Binary-to-Source Mappings: Focuses on package-level attribution for vulnerabilities rather than line-of-code binary offsets.
Explore 3 awesome GitHub repositories matching operating systems & systems programming · Package Version Mapping. Refine with filters or upvote what's useful.
Clair is a container image vulnerability scanner and security analyzer. It performs static analysis of container images by matching package contents against vulnerability databases to identify security risks across different package formats and architectures. The project functions as both an image indexer and a vulnerability database manager. It processes container layers into intermediate representations to enable fast security lookups and synchronizes security metadata from multiple external sources to maintain a local registry. Capability areas include continuous security monitoring, whic
Tracks the relationship between source-level packages and binary versions to improve vulnerability attribution accuracy.
Sbt 是一个专为 Scala 和 Java 设计的 JVM 构建工具和依赖管理系统。它作为一个多项目构建编排器,管理源代码的编译、从远程仓库解析外部库,并打包二进制文件以供分发。 该项目以其交互式构建系统而著称,该系统提供了一个用于实时状态检查和任务执行的读取-求值-打印循环(REPL)。它利用基于依赖图的执行模型来处理任务,并维护一个用于动态构建配置的类型安全键值存储。 其功能涵盖具有增量重编译、模块化项目组织和自动化测试执行的 JVM 构建自动化。该系统还支持跨版本编译、向云存储发布工件,以及用于添加自定义构建逻辑的可扩展插件模型。
Maps specific files and generated sources to designated internal paths within JAR packages.
cargo-binstall is a toolchain extension and binary artifact manager designed to install pre-compiled Rust binaries from releases. Its primary purpose is to avoid the time and resource costs associated with compiling software from source by fetching pre-built executables. The tool provides mechanisms for discovering and downloading binaries across different architectures and platforms. It includes capabilities for verifying the authenticity and integrity of downloaded packages using cryptographic signature verification against public keys. The system supports automated installation in continu
Specifies custom download URLs and archive formats for packages that cannot be auto-detected.