dependency-graph

The code at

https://github.com/oss-review-toolkit/ort/blob/fd1b62a799523b55871cd04001ddfe1e6262da0f/analyzer/src/main/kotlin/managers/Stack.kt#L113-L140

can be simplified now that Stack 2.3.1 supports ls dependencies json.

We need to make it possible statoscope generate path/to/stats.json -o
Just remove required-flag from output-argument

Right now argument validation and actually calling the subcommands is lumped together in one function:

https://github.com/rust-secure-code/cargo-supply-chain/blob/776ab090333f4f07a61fe0e66386e49bae5eff45/src/main.rs#L65-L67

This makes them impossible to unit-test and necessitates manual calls to eprintln_help() in multiple places instead of just one in main on any validation error.

We

@bburns632 @jayqi it's been a bit over a year since we did a release to CRAN. Want to do one?

I found myself using {pkgnet} this week to prep for a talk, and I really wanted the features from uptake/pkgnet#243, which I realize now never made it to CRAN.

If you're open to spending a little time on {pkgnet}, I'd also be happy to submit PRs for the warnings on https