platformio/platformio-core

GitHub dependency graph for lib_deps

Open

#4,184 创建于 2022年2月16日

在 GitHub 查看
 (4 评论) (4 反应) (0 负责人)Python (791 fork)batch import
help wantedintegration

仓库指标

Star
 (7,329 star)
PR 合并指标
 (平均合并 109天 16小时) (30 天内合并 5 个 PR)

描述

Configuration

Operating system: Win10

PlatformIO Version (platformio --version): 5.2.5

Description of problem

There appears to be no current support for GitHub dependency graph and Dependabot alerts. Supporting GitHub dependency graph would be great for security updates in addition to the dependency graph it adds.

Steps to Reproduce

  1. Create new PlatformIO project via "New Project" button (configure name, board, framework, location)
  2. Open the "Libraries" tab find and select a library to install (for example: esp32-camera)
  3. Click "Add to Project" button
  4. Select the project that the dependency should be added to (seems like this should only be the current project)
  5. Click the "Add" button
  6. Push project to GitHub

Actual Results

Dependency is installed in /.pio/libdeps and added to lib_deps in /platformio.ini file which GitHub doesn't support for package management:

[env:esp32dev]
platform = espressif32
board = esp32dev
framework = arduino
lib_deps = espressif/esp32-camera@^2.0.0

Expected Results

Dependency is configured in a way compatible with GitHub's dependency graph.

Additional info

Community suggestion by @nicolas-rabault https://community.platformio.org/t/make-platformio-work-with-github-dependencies-graph/12965

贡献者指南