tamada / pelicode / 39084320707

82%

main: 83%

push

github

Leave out the dependencies of the checked code

Code matching a library the checked project depends on is expected.
scan now reads Cargo.lock, go.mod, go.sum, requirements*.txt,
poetry.lock, uv.lock, Pipfile.lock, Gemfile.lock, pom.xml and
gradle.lockfile in the checked directories and below, and directly in
the directories above them up to the repository root, and leaves out
candidates found only in those packages (occurrences in them are
removed from the other candidates). The number left out is printed on
the standard error; --no-exclude-dependencies or
scan.exclude_dependencies: false reports them all.

The parsing is pelicode_detect::dependencies, so that other tools can
use it.

Closes #7

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

321 of 330 new or added lines in 3 files covered. (97.27%)

3603 of 4414 relevant lines covered (81.63%)

1248.04 hits per line