v2.19.9

• Go: Fixes a regression, where deep and test dependencies were reported as direct dependencies. (#443)

v2.19.8

• Perl: Adds support for Perl with parsing of META.json, META.yml, MYMETA.yml, MYMETA.json. (#428)

v2.19.7

• Resolves a regression when parsing npm package-lock.json files that do not contain a version field (#445)

v2.19.6

• Special cases scans with a single VSI only filter to skip other analysis strategies (#407)
• Adds the ability to skip resolving dependencies from FOSSA projects discovered during VSI scans (#435)

v2.19.5

• Fixes an issue observed during VSI analysis where fingerprinting files with lines longer than 64KiB would fail. (#427)

v2.19.4

• Adds experimental capability for filtering gradle configuration in analysis. (#425)

Refer to: gradle documentation for more details.

v2.19.3

• Removes fossa compatibility command. (#383)

Use fossa-deps file to supplement functionality, previously provided by fossa compatibility command.

Relevant documentation:

• https://github.com/fossas/spectrometer/blob/master/docs/features/vendored-dependencies.md
• https://github.com/fossas/spectrometer/blob/master/docs/features/manual-dependencies.md
• https://github.com/fossas/spectrometer/blob/master/docs/references/files/fossa-deps.md

v2.19.2

• Adds --config flag, which can set custom path for configuration file. If --config flag is not used, base directory will scanned for .fossa.yml file. (#415)

v2.19.1

• Fixes an issue where nodeJS errors were reported when no NodeJS project were discovered. (#424)

v2.19.0

• Adds support for fossa analyze --include-unused-deps, which prevents filtering out non-production dependencies. (#412)
• Yarn: Adds support for workspaces. (#374)
• Npm: Adds support for workspaces. (#374)
• Npm: Removes unreliable npm ls-based analysis tactic. (#374)
• fossa-deps: Adds support for bower-type in referenced-dependencies. (#406)
• Monorepo: Chunk AOSP files when uploading (#421).
• Monorepo: Don't fail on files that are filtered during expansion (#421).