feature request - include javascript package requirements about addonfactory-ucc-generator HOT 9 CLOSED

We are using fossa right now in the UCC UI repository as well, I'll check now if we can get what we want without doing anything :)

from addonfactory-ucc-generator.

I made a #479 PR to add a dependencies.txt file under appserver/static/js folder when the add-on will be generated after running ucc-gen command.

This is available for splunk-add-on-ucc-framework>=5.12.0

from addonfactory-ucc-generator.

Hi @pmeyerson, could you please share your reason for pulling the lock file in this repo? Since the requirements are resolved and bundled into build generated at ucc-base-ui repo. Only bundled JS files are imported in the ucc-generator repo and hence there seems to be no reason for pulling a lock file here.

from addonfactory-ucc-generator.

Hi sorry if this wasn't clear or I am doing something crazy because I am still learning about js packaging.

My goal is to be able to report on the js dependencies included in my app built with ucc-gen.

I couldn't find any easy way with the ucc-gen build out put to easily list the js libraries, so I looked at the lock file in the base-ui repo. But it seems to include development dependencies and not just prod dependencies so I generate it myself to exclude those.

from addonfactory-ucc-generator.

But from my perspective, it would be preferred if ucc-gen could perform this step on its own, so the ask is to provide list of js dependencies injected by ucc-gen in some way of your choosing that would make sense for everyone. Hope that helps clarify things.

from addonfactory-ucc-generator.

@pmeyerson do you have some specific format of the js dependencies in mind?

from addonfactory-ucc-generator.

I don't. It's also possible this is better solved by some sbom generating tool or similar.

from addonfactory-ucc-generator.

Actually, checked yarn documentation.

Found that we can use something like yarn list --prod --depth=0.

Sample output for the UCC UI repo:

yarn list v1.22.19
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @babel/[email protected]
├─ @emotion/[email protected]
├─ @emotion/[email protected]
├─ @emotion/[email protected]
├─ @emotion/[email protected]
├─ @splunk/[email protected]
├─ @splunk/[email protected]
├─ @splunk/[email protected]
├─ @splunk/[email protected]
├─ @splunk/[email protected]
├─ @splunk/[email protected]
├─ @splunk/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ @types/[email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
├─ [email protected]
└─ [email protected]
✨  Done in 0.40s.

I'll think about it next week as well.

from addonfactory-ucc-generator.

Awesome thank you!

from addonfactory-ucc-generator.