Dep

Overview

Dep is an alternative toolchain for golang dependency management. Though go modules are the blessed form of dependency management, dep is exploring alternatives in the dependency management space, and hasn't been deprecated.

Project Discovery

gopkglock: Find all files named Gopkg.lock

gopkgtoml: Find all files named Gopkg.toml

Analysis: gopkglock

We parse projects from Gopkg.lock. This is more comprehensive than GopkgToml, as it contains pinned versions of all of our direct and transitive dependencies. We also pick up on source locations from GopkgLock

Analysis: gopkgtoml

We parse dependency rules from Gopkg.toml. overrides are similar to gomod replaces.