Skip to content

[Feature] Collecting dependencies data for top GitHub projects based on GitHub API #1682

@xiaoya-yaya

Description

@xiaoya-yaya

Description

Many top-level open source projects on GitHub have enabled the 'Dependency Graph' feature on GitHub.

Take vLLM as an example, here is the SBOM dependency graph that I believe applied the SPDX standard: https://github.com/vllm-project/vllm/network/dependencies, and such dependency data could be accessed through GitHub API: https://api.github.com/repos/vllm-project/vllm/dependency-graph/sbom.

Could OpenDigger continuously collect such data for top-level OpenRank projects? Such data would be instrumental for the ecosystem correlation analysis.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions