help wantedintegration
Métriques du dépôt
- Stars
- (7 329 stars)
- Métriques de merge PR
- (Merge moyen 109j 16h) (5 PRs mergées en 30 j)
Description
Configuration
Operating system: Win10
PlatformIO Version (platformio --version): 5.2.5
Description of problem
There appears to be no current support for GitHub dependency graph and Dependabot alerts. Supporting GitHub dependency graph would be great for security updates in addition to the dependency graph it adds.
Steps to Reproduce
- Create new PlatformIO project via "New Project" button (configure name, board, framework, location)
- Open the "Libraries" tab find and select a library to install (for example: esp32-camera)
- Click "Add to Project" button
- Select the project that the dependency should be added to (seems like this should only be the current project)
- Click the "Add" button
- Push project to GitHub
Actual Results
Dependency is installed in /.pio/libdeps and added to lib_deps in /platformio.ini file which GitHub doesn't support for package management:
[env:esp32dev]
platform = espressif32
board = esp32dev
framework = arduino
lib_deps = espressif/esp32-camera@^2.0.0
Expected Results
Dependency is configured in a way compatible with GitHub's dependency graph.
Additional info
Community suggestion by @nicolas-rabault https://community.platformio.org/t/make-platformio-work-with-github-dependencies-graph/12965