Gleam DependencyHandler

model/src/main/kotlin/utils/PurlExtensions.kt

@@ -51,7 +51,7 @@ fun Identifier.getPurlType() =
         "maven" -> PurlType.MAVEN
         "npm" -> PurlType.NPM
         "nuget" -> PurlType.NUGET
-        "otp" -> PurlType.OTP
+        "otp", "gleam" -> PurlType.OTP
         "pod" -> PurlType.COCOAPODS
         "pub" -> PurlType.PUB
         "pypi" -> PurlType.PYPI

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-expected-output.yml

@@ -20,17 +20,80 @@ project:
   scopes:
   - name: "dependencies"
     dependencies:
+    - id: "Gleam::invalid_pkg:1.0.0"
+      issues:
+      - timestamp: "1970-01-01T00:00:00Z"
+        source: "Gleam"
+        message: "Path dependency 'invalid_pkg' with path '/invalid-path' points outside\
+          \ the project directory."
+        severity: "WARNING"
+    - id: "Gleam::local_pkg:2.0.0"
     - id: "Hex::gleam_stdlib:0.34.0"
     - id: "OTP::gleam_json:3.1.0"
       dependencies:
       - id: "Hex::gleam_stdlib:0.34.0"
-    - id: "OTP::local_pkg:2.0.0"
   - name: "dev-dependencies"
     dependencies:
     - id: "Hex::gleeunit:1.2.0"
       dependencies:
       - id: "Hex::gleam_stdlib:0.34.0"
 packages:
+- id: "Gleam::invalid_pkg:1.0.0"
+  purl: "pkg:otp/[email protected]"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  description: ""
+  homepage_url: "https://github.com/test-org/test-project"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  vcs:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+  source_code_origins:
+  - "VCS"
+- id: "Gleam::local_pkg:2.0.0"
+  purl: "pkg:otp/[email protected]"
+  declared_licenses: []
+  declared_licenses_processed: {}
+  description: ""
+  homepage_url: "https://github.com/test-org/test-project"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  vcs:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>/local_pkg"
+  vcs_processed:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>/local_pkg"
+  source_code_origins:
+  - "VCS"
 - id: "Hex::gleam_stdlib:0.34.0"
   purl: "pkg:hex/[email protected]"
   cpe: "cpe:2.3:a:gleam-lang:stdlib:0.34.0:*:*:*:*:*:*:*"
@@ -127,31 +190,3 @@ packages:
     path: ""
   source_code_origins:
   - "VCS"
-- id: "OTP::local_pkg:2.0.0"
-  purl: "pkg:otp/[email protected]"
-  declared_licenses: []
-  declared_licenses_processed: {}
-  description: ""
-  homepage_url: "https://github.com/test-org/test-project"
-  binary_artifact:
-    url: ""
-    hash:
-      value: ""
-      algorithm: ""
-  source_artifact:
-    url: ""
-    hash:
-      value: ""
-      algorithm: ""
-  vcs:
-    type: "Git"
-    url: "<REPLACE_URL_PROCESSED>"
-    revision: "<REPLACE_REVISION>"
-    path: "<REPLACE_PATH>/local_pkg"
-  vcs_processed:
-    type: "Git"
-    url: "<REPLACE_URL_PROCESSED>"
-    revision: "<REPLACE_REVISION>"
-    path: "<REPLACE_PATH>/local_pkg"
-  source_code_origins:
-  - "VCS"

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project-expected-output.yml

@@ -0,0 +1,149 @@
+---
+projects:
+- id: "Gleam::child_pkg:1.0.0"
+  definition_file_path: "<REPLACE_PATH>/child/gleam.toml"
+  declared_licenses:
+  - "MIT"
+  declared_licenses_processed:
+    spdx_expression: "MIT"
+  vcs:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>/child"
+  homepage_url: ""
+  scopes:
+  - name: "dependencies"
+    dependencies:
+    - id: "Gleam::sibling_pkg:1.0.0"
+      linkage: "PROJECT_DYNAMIC"
+      dependencies:
+      - id: "Hex::gleam_json:2.0.0"
+        dependencies:
+        - id: "Hex::gleam_stdlib:0.34.0"
+- id: "Gleam::parent_project:1.0.0"
+  definition_file_path: "<REPLACE_DEFINITION_FILE_PATH>"
+  declared_licenses:
+  - "MIT"
+  declared_licenses_processed:
+    spdx_expression: "MIT"
+  vcs:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>"
+  homepage_url: ""
+  scopes:
+  - name: "dependencies"
+    dependencies:
+    - id: "Gleam::child_pkg:1.0.0"
+      linkage: "PROJECT_DYNAMIC"
+      dependencies:
+      - id: "Gleam::sibling_pkg:1.0.0"
+        linkage: "PROJECT_DYNAMIC"
+        dependencies:
+        - id: "Hex::gleam_json:2.0.0"
+          dependencies:
+          - id: "Hex::gleam_stdlib:0.34.0"
+- id: "Gleam::sibling_pkg:1.0.0"
+  definition_file_path: "<REPLACE_PATH>/sibling/gleam.toml"
+  declared_licenses:
+  - "MIT"
+  declared_licenses_processed:
+    spdx_expression: "MIT"
+  vcs:
+    type: ""
+    url: ""
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "<REPLACE_URL_PROCESSED>"
+    revision: "<REPLACE_REVISION>"
+    path: "<REPLACE_PATH>/sibling"
+  homepage_url: ""
+  scopes:
+  - name: "dependencies"
+    dependencies:
+    - id: "Hex::gleam_json:2.0.0"
+      dependencies:
+      - id: "Hex::gleam_stdlib:0.34.0"
+packages:
+- id: "Hex::gleam_json:2.0.0"
+  purl: "pkg:hex/[email protected]"
+  cpe: "cpe:2.3:a:gleam-lang:json:2.0.0:*:*:*:*:*:*:*"
+  authors:
+  - "Louis Pilfold <[email protected]>"
+  declared_licenses:
+  - "Apache-2.0"
+  declared_licenses_processed:
+    spdx_expression: "Apache-2.0"
+  description: "Work with JSON in Gleam"
+  homepage_url: "https://gleam.run/"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://repo.hex.pm/tarballs/gleam_json-2.0.0.tar"
+    hash:
+      value: "e108ab9b822e0a64a0cc64eb95e4b5c5cb95f9e1e7b3ec8f2b4f68b3a7d4d9c5"
+      algorithm: "SHA-256"
+  vcs:
+    type: "Git"
+    url: "https://github.com/gleam-lang/json.git"
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/gleam-lang/json.git"
+    revision: ""
+    path: ""
+  source_code_origins:
+  - "ARTIFACT"
+  - "VCS"
+- id: "Hex::gleam_stdlib:0.34.0"
+  purl: "pkg:hex/[email protected]"
+  cpe: "cpe:2.3:a:gleam-lang:stdlib:0.34.0:*:*:*:*:*:*:*"
+  authors:
+  - "Louis Pilfold <[email protected]>"
+  declared_licenses:
+  - "Apache-2.0"
+  declared_licenses_processed:
+    spdx_expression: "Apache-2.0"
+  description: "A standard library for the Gleam programming language"
+  homepage_url: "https://gleam.run/"
+  binary_artifact:
+    url: ""
+    hash:
+      value: ""
+      algorithm: ""
+  source_artifact:
+    url: "https://repo.hex.pm/tarballs/gleam_stdlib-0.34.0.tar"
+    hash:
+      value: "1fb8454d2991e9b4c0c804544d8a9ad0f6f335a207d3b7a581e123b6e0d7a519"
+      algorithm: "SHA-256"
+  vcs:
+    type: "Git"
+    url: "https://github.com/gleam-lang/stdlib.git"
+    revision: ""
+    path: ""
+  vcs_processed:
+    type: "Git"
+    url: "https://github.com/gleam-lang/stdlib.git"
+    revision: ""
+    path: ""
+  source_code_origins:
+  - "ARTIFACT"
+  - "VCS"

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project/child/gleam.toml

@@ -0,0 +1,7 @@
+name = "child_pkg"
+version = "1.0.0"
+description = "A child Gleam project that depends on sibling"
+licences = ["MIT"]
+
+[dependencies]
+sibling_pkg = { path = "../sibling" }

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project/child/manifest.toml

@@ -0,0 +1,11 @@
+# This file was generated by Gleam
+# You typically do not need to edit this file
+
+packages = [
+  { name = "gleam_json", version = "2.0.0", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "gleam_json", source = "hex", outer_checksum = "E108AB9B822E0A64A0CC64EB95E4B5C5CB95F9E1E7B3EC8F2B4F68B3A7D4D9C5" },
+  { name = "gleam_stdlib", version = "0.34.0", build_tools = ["gleam"], requirements = [], otp_app = "gleam_stdlib", source = "hex", outer_checksum = "1FB8454D2991E9B4C0C804544D8A9AD0F6F335A207D3B7A581E123B6E0D7A519" },
+  { name = "sibling_pkg", version = "1.0.0", build_tools = ["gleam"], requirements = ["gleam_json"], source = "local", path = "../sibling" },
+]
+
+[requirements]
+sibling_pkg = { source = "path" }

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project/gleam.toml

@@ -0,0 +1,7 @@
+name = "parent_project"
+version = "1.0.0"
+description = "A parent Gleam project for multi-project testing"
+licences = ["MIT"]
+
+[dependencies]
+child_pkg = { path = "./child" }

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project/manifest.toml

@@ -0,0 +1,12 @@
+# This file was generated by Gleam
+# You typically do not need to edit this file
+
+packages = [
+  { name = "child_pkg", version = "1.0.0", build_tools = ["gleam"], requirements = ["sibling_pkg"], source = "local", path = "child" },
+  { name = "gleam_json", version = "2.0.0", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "gleam_json", source = "hex", outer_checksum = "E108AB9B822E0A64A0CC64EB95E4B5C5CB95F9E1E7B3EC8F2B4F68B3A7D4D9C5" },
+  { name = "gleam_stdlib", version = "0.34.0", build_tools = ["gleam"], requirements = [], otp_app = "gleam_stdlib", source = "hex", outer_checksum = "1FB8454D2991E9B4C0C804544D8A9AD0F6F335A207D3B7A581E123B6E0D7A519" },
+  { name = "sibling_pkg", version = "1.0.0", build_tools = ["gleam"], requirements = ["gleam_json"], source = "local", path = "sibling" },
+]
+
+[requirements]
+child_pkg = { source = "path" }

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project/sibling/gleam.toml

@@ -0,0 +1,7 @@
+name = "sibling_pkg"
+version = "1.0.0"
+description = "A sibling Gleam project"
+licences = ["MIT"]
+
+[dependencies]
+gleam_json = ">= 2.0.0 and < 3.0.0"

plugins/package-managers/gleam/src/funTest/assets/projects/synthetic/gleam-multi-project/sibling/manifest.toml

@@ -0,0 +1,10 @@
+# This file was generated by Gleam
+# You typically do not need to edit this file
+
+packages = [
+  { name = "gleam_json", version = "2.0.0", build_tools = ["gleam"], requirements = ["gleam_stdlib"], otp_app = "gleam_json", source = "hex", outer_checksum = "E108AB9B822E0A64A0CC64EB95E4B5C5CB95F9E1E7B3EC8F2B4F68B3A7D4D9C5" },
+  { name = "gleam_stdlib", version = "0.34.0", build_tools = ["gleam"], requirements = [], otp_app = "gleam_stdlib", source = "hex", outer_checksum = "1FB8454D2991E9B4C0C804544D8A9AD0F6F335A207D3B7A581E123B6E0D7A519" },
+]
+
+[requirements]
+gleam_json = { source = "hex", version = ">= 2.0.0 and < 3.0.0" }