Skip to main content

Contrast CLI supported languages and package managers

Contrast CLI supports these languages when using the audit command.

Package manager

Language

Files required

Notes

RubyGems

Ruby

gemfile and gemfile.lock

Composer

PHP

composer.json and composer.lock 

PyPI

Python

pipfile and pipfile.lock

NuGet

.NET Core

.NET Framework

MSBuild 15.0 or greater and packages.lock.json.

If the packages.lock.json file is unavailable it can be generated by setting RestorePackagesWithLockFile to true within each *.csproj file and running dotnet build

.NET is only supported using the --legacy option

Maven Central

Java

pom.xml 

Maven build platform including the dependency plugin

build.gradle

gradlew dependencies or ./gradlew dependencies

npm

This includes client-side and server-side JavaScript packages.

JavaScript

package.json and a lockfile (either package-lock.json or yarn.lock)

V2 and V3 lock files are supported

Gopm

Go

go.mod