Overview
Cysmiq parses dependency manifests and lock files to identify packages and match them against vulnerability advisories. This page lists supported file types by ecosystem. When a manifest and its lock file are both present, Cysmiq groups them into the same discovered manifest record where supported. This keeps package, manifest, and SBOM views focused on the dependency set rather than showing related files as separate assets.Supported file types
JavaScript / TypeScript
Python
Go
Java / Kotlin
Scala
Dart
.NET
PHP
Ruby
Rust
Elixir / Erlang
Swift
Notes
- Lock files provide precise version information for transitive dependencies
- When a lock file is present, Cysmiq uses it for version resolution where supported
- Some ecosystems (pip with requirements.txt, Maven) don’t use lock files by default
- Some .NET inputs are generated outputs used for dependency resolution