⚠️ AUTO-GENERATED FILE - Do not edit manually. This file is automatically generated from parser metadata. To update, run:cargo run --manifest-path xtask/Cargo.toml --bin generate-supported-formats
Provenant supports package manifests, installed-package metadata, recognizers, and a small number of detector-driven package-adjacent surfaces across multiple ecosystems.
Rows whose File Patterns entry is written as
<...>describe detector-driven or scanner-gated surfaces rather than pure path globs.
| Description | File Patterns | Package Type | Language | Documentation |
|---|---|---|---|---|
| Misc file type recognizers (JAR, WAR, EAR, AAR, iOS, Chrome, Mozilla, installers, disk images, etc.) | **/*.jar, **/ivy.xml, **/*.war, **/WEB-INF/web.xml, **/*.ear, **/META-INF/application.xml, **/meta-inf/module.xml, **/*.mar, **/*.sar, **/meta-inf/jboss-service.xml, **/package.js, **/*.aar, **/*.xpi, **/*.crx, **/*.ipa, **/*.cab, **/*.shar, **/*.dmg, **/*.sparseimage, **/*.iso, **/*.udf, **/*.img, **/*.exe |
- | ||
| AboutCode .ABOUT metadata file | **/*.ABOUT |
about | Link | |
| Alpine Linux APKBUILD recipe | **/APKBUILD |
alpine | Shell | Link |
| Alpine Linux package (installed db and .apk archive) | **/lib/apk/db/installed, **/*.apk |
alpine | Link | |
| Arch Linux package metadata (.SRCINFO, .AURINFO, .PKGINFO) | **/.SRCINFO, **/.AURINFO, **/.PKGINFO |
alpm | Link | |
| Android APK archive manifest metadata | **/*.apk |
android | Link | |
| Android App Bundle (.aab) proto manifest metadata | **/*.aab |
android | Link | |
| Android Soong METADATA textproto | **/METADATA |
android | Link | |
| AndroidManifest.xml metadata (text XML or binary AXML) | **/AndroidManifest.xml |
android | XML | Link |
| Autotools configure script | **/configure, **/configure.ac |
autotools | C | Link |
| Bazel BUILD file | **/BUILD |
bazel | Link | |
| Bazel MODULE.bazel file | **/MODULE.bazel |
bazel | Link | |
| Yocto BitBake append file | **/*.bbappend |
bitbake | Shell | Link |
| Yocto BitBake recipe | **/*.bb |
bitbake | Shell | Link |
| Bower package manifest | **/bower.json, **/.bower.json |
bower | JavaScript | Link |
| Buck build file and METADATA.bzl | **/BUCK, **/METADATA.bzl |
buck | Link | |
| Rust Cargo.lock lockfile | **/Cargo.lock, **/cargo.lock |
cargo | Rust | Link |
| Rust Cargo.toml manifest | **/Cargo.toml, **/cargo.toml |
cargo | Rust | Link |
| Rust compiled binary with cargo-auditable dependency section | <compiled Rust binaries with .dep-v0 sections> |
cargo | Rust | Link |
| Carthage Cartfile dependency manifest | **/Cartfile, **/Cartfile.private |
carthage | Objective-C | Link |
| Carthage Cartfile.resolved pinned dependencies | **/Cartfile.resolved |
carthage | Objective-C | Link |
| Chef cookbook metadata | **/metadata.json, **/metadata.rb |
chef | Ruby | Link |
| CocoaPods .podspec.json manifest | **/*.podspec.json |
cocoapods | Objective-C | Link |
| CocoaPods Podfile | **/Podfile |
cocoapods | Objective-C | Link |
| CocoaPods podspec file | **/*.podspec |
cocoapods | Objective-C | Link |
| Cocoapods Podfile.lock | **/Podfile.lock |
cocoapods | Objective-C | Link |
| PHP composer lockfile | **/*composer.lock, **/composer.*.lock |
composer | PHP | Link |
| PHP composer manifest | **/*composer.json, **/composer.*.json |
composer | PHP | Link |
| Conan C/C++ package manifest | **/conanfile.py, **/conanfile.txt, **/conan.lock |
conan | C++ | Link |
| Conan external source metadata | */conandata.yml |
conan | C++ | Link |
| Conda installed package metadata JSON | *conda-meta/*.json |
conda | Python | Link |
| Conda package manifest and environment file | **/meta.yaml, **/meta.yml, **/recipe/recipe.yaml, **/recipe/recipe.yml, **/environment.yml, **/environment.yaml, **/env.yaml, **/env.yml, **/conda.yaml, **/conda.yml, **/*conda*.yaml, **/*conda*.yml, **/*env*.yaml, **/*env*.yml, **/*environment*.yaml, **/*environment*.yml |
conda | Python | Link |
| CPAN Perl MANIFEST | **/MANIFEST |
cpan | Perl | Link |
| CPAN Perl META.json | **/META.json |
cpan | Perl | Link |
| CPAN Perl META.yml | **/META.yml |
cpan | Perl | Link |
| CPAN Perl Makefile.PL | */Makefile.PL |
cpan | Perl | Link |
| CPAN Perl dist.ini | */dist.ini |
cpan | Perl | Link |
| CRAN R package DESCRIPTION file | **/DESCRIPTION |
cran | R | Link |
| Debian MD5 checksums in extracted .deb control tarball | **/control.tar.gz-extract/md5sums, **/control.tar.xz-extract/md5sums |
deb | Link | |
| Debian binary package archive (.deb) | **/*.deb |
deb | Link | |
| Debian control file in extracted .deb control tarball | **/control.tar.gz-extract/control, **/control.tar.xz-extract/control |
deb | Link | |
| Debian distroless package database (status.d) | **/var/lib/dpkg/status.d/* |
deb | Link | |
| Debian installed files list | **/var/lib/dpkg/info/*.list |
deb | Link | |
| Debian installed package database (dpkg status) | **/var/lib/dpkg/status |
deb | Link | |
| Debian installed package md5sums | **/var/lib/dpkg/info/*.md5sums |
deb | Link | |
| Debian machine-readable copyright file | **/debian/copyright, **/ports/*/copyright, **/packages/deb/copyright, **/usr/share/doc/*/copyright, **/*_copyright |
deb | Link | |
| Debian original source tarball | **/*.orig.tar.* |
deb | Link | |
| Debian source control file (.dsc) | **/*.dsc |
deb | Link | |
| Debian source metadata tarball | **/*.debian.tar.* |
deb | Link | |
| Debian source package control file (debian/control) | **/debian/control |
deb | Link | |
| Deno configuration | **/deno.json, **/deno.jsonc |
deno | TypeScript | Link |
| Deno lockfile | **/deno.lock |
deno | TypeScript | Link |
| Dockerfile or Containerfile OCI image metadata | **/Dockerfile, **/dockerfile, **/Containerfile, **/containerfile, **/Containerfile.core, **/containerfile.core |
docker | Dockerfile | Link |
| FreeBSD +COMPACT_MANIFEST package manifest | **/*COMPACT_MANIFEST |
freebsd | Link | |
| Ruby .gem archive | **/*.gem |
gem | Ruby | Link |
| Ruby .gemspec manifest | **/*.gemspec, **/data.gz-extract/*.gemspec, **/specifications/*.gemspec |
gem | Ruby | Link |
| Ruby Gemfile manifest | **/Gemfile, **/data.gz-extract/Gemfile |
gem | Ruby | Link |
| Ruby Gemfile.lock lockfile | **/Gemfile.lock, **/data.gz-extract/Gemfile.lock |
gem | Ruby | Link |
| Ruby gem metadata (extracted) | **/metadata.gz-extract |
gem | Ruby | Link |
| citation cff metadata | **/CITATION.cff |
generic | Text | Link |
| Git submodules manifest | **/.gitmodules |
gitmodules | Link | |
| Go Godeps.json legacy dependency file | **/Godeps.json |
golang | Go | - |
| Go compiled binary with embedded build info | <compiled Go binaries with Go build info> |
golang | Go | Link |
| Go go.mod module manifest | **/go.mod |
golang | Go | Link |
| Go go.sum checksum database | **/go.sum |
golang | Go | Link |
| Go go.work workspace file | **/go.work |
golang | Go | Link |
| Go module graph file | *go.mod.graph, *go.modgraph |
golang | Go | Link |
| Hackage Cabal package manifest | **/*.cabal |
hackage | Haskell | Link |
| Hackage Stack project manifest | **/stack.yaml |
hackage | Haskell | Link |
| Hackage cabal.project workspace file | **/cabal.project |
hackage | Haskell | Link |
| Haxe haxelib.json package manifest | **/haxelib.json |
haxe | Haxe | Link |
| Helm chart metadata | **/Chart.yaml, **/Chart.lock |
helm | YAML | Link |
| Erlang OTP application resource file | **/*.app.src |
hex | Erlang | Link |
| Hex mix.lock lockfile | **/mix.lock |
hex | Elixir | Link |
| Rebar3 configuration | **/rebar.config |
hex | Erlang | Link |
| Rebar3 lockfile | **/rebar.lock |
hex | Erlang | Link |
| Julia Manifest.toml resolved dependencies | **/Manifest.toml |
julia | Julia | Link |
| Julia Project.toml manifest | **/Project.toml |
julia | Julia | Link |
| Linux OS release metadata file | *etc/os-release, *usr/lib/os-release |
linux-distro | Link | |
| Apache Maven POM | **/*.pom, **/pom.xml, **/pom.properties, **/META-INF/MANIFEST.MF |
maven | Java | Link |
| Clojure deps.edn and project.clj manifests | **/deps.edn, **/project.clj |
maven | Clojure | Link |
| Gradle build script | **/build.gradle, **/build.gradle.kts |
maven | Java | Link |
| Gradle lockfile | **/gradle.lockfile |
maven | Java | Link |
| Gradle module metadata | **/*.module |
maven | Java | Link |
| Scala SBT build.sbt definition | **/build.sbt |
maven | Scala | Link |
| Meson meson.build manifest | **/meson.build |
meson | Link | |
| Nix derivation manifest | **/default.nix |
nix | Nix | Link |
| Nix flake lockfile | **/flake.lock |
nix | JSON | Link |
| Nix flake manifest | **/flake.nix |
nix | Nix | Link |
| Bun lockfile | **/bun.lock |
npm | JavaScript | Link |
| Legacy Bun binary lockfile | **/bun.lockb |
npm | JavaScript | Link |
| npm package-lock.json lockfile | **/package-lock.json, **/.package-lock.json, **/npm-shrinkwrap.json |
npm | JavaScript | Link |
| npm package.json manifest | **/package.json |
npm | JavaScript | Link |
| pnpm lockfile | **/pnpm-lock.yaml, **/shrinkwrap.yaml |
npm | JavaScript | Link |
| pnpm workspace yaml file | **/pnpm-workspace.yaml |
npm | JavaScript | Link |
| yarn plug and play runtime state | **/.pnp.cjs |
npm | JavaScript | Link |
| yarn.lock lockfile (v1 and v2+) | **/yarn.lock |
npm | JavaScript | Link |
| .NET .deps.json runtime dependency graph | **/*.deps.json |
nuget | C# | Link |
| .NET .nupkg package archive | **/*.nupkg |
nuget | C# | Link |
| .NET .nuspec package specification | **/*.nuspec |
nuget | C# | Link |
| .NET Directory.Build.props property source | **/Directory.Build.props |
nuget | C# | Link |
| .NET Directory.Packages.props central package management manifest | **/Directory.Packages.props |
nuget | C# | Link |
| .NET PackageReference C# project file | **/*.csproj |
nuget | C# | Link |
| .NET PackageReference F# project file | **/*.fsproj |
nuget | F# | Link |
| .NET PackageReference Visual Basic project file | **/*.vbproj |
nuget | Visual Basic .NET | Link |
| .NET packages.config manifest | **/packages.config |
nuget | C# | Link |
| .NET packages.lock.json lockfile | **/packages.lock.json |
nuget | C# | Link |
| .NET project.json manifest | **/project.json |
nuget | C# | Link |
| .NET project.lock.json lockfile | **/project.lock.json |
nuget | C# | Link |
| OCaml OPAM package manifest | **/*.opam, **/opam |
opam | OCaml | Link |
| Pixi workspace manifest and lockfile | **/pixi.toml, **/pixi.lock |
pixi | TOML/YAML | Link |
| Dart pubspec.yaml manifest | **/pubspec.yaml, **/pubspec.lock |
pub | Dart | Link |
| publiccode metadata | **/publiccode.yml, **/publiccode.yaml |
publiccode | YAML | Link |
| Pipenv lockfile and manifest | **/Pipfile.lock, **/Pipfile |
pypi | Python | Link |
| Poetry lockfile | **/poetry.lock |
pypi | Python | Link |
| Python package manifests (pyproject.toml, setup.py, suffixed setup.py variants, setup.cfg, pypi.json, PKG-INFO, .dist-info/METADATA, pip cache origin.json, sdist archives, .whl, .egg) | **/pyproject.toml, **/setup.py, **/*_setup.py, **/*-setup.py, **/setup.cfg, **/pypi.json, **/PKG-INFO, **/*.dist-info/METADATA, **/origin.json, **/*.tar.gz, **/*.tgz, **/*.tar.bz2, **/*.tar.xz, **/*.zip, **/*.whl, **/*.egg |
pypi | Python | Link |
| pip inspect deplock file | *pip-inspect.deplock |
pypi | Python | Link |
| pip requirements file | **/requirements*.txt, **/*requirements.txt, **/reqs.txt, **/minreqs.txt, **/*-reqs.txt, **/*_reqs.txt, **/*.reqs.txt, **/*-minreqs.txt, **/*_minreqs.txt, **/*.minreqs.txt, **/requirements*.in, **/*requirements.in, **/requires.txt, **/requirements/*.txt, **/requirements/*.in, **/requirements/**/*.txt, **/requirements/**/*.in, **/requirements*/*.txt, **/requirements*/*.in, **/requirements*/**/*.txt, **/requirements*/**/*.in |
pypi | Python | Link |
| pylock.toml lockfile | **/pylock.toml, **/pylock.*.toml |
pypi | Python | Link |
| uv lockfile | **/uv.lock |
pypi | Python | Link |
| Third-party attribution README files | **/README.android, **/README.chromium, **/README.facebook, **/README.google, **/README.thirdparty |
readme | Link | |
| RPM Mariner distroless package manifest | *var/lib/rpmmanifest/container-manifest-2 |
rpm | Link | |
| RPM installed package database | **/var/lib/rpm/Packages, **/usr/lib/sysimage/rpm/Packages, **/var/lib/rpm/Packages.db, **/usr/lib/sysimage/rpm/Packages.db, **/var/lib/rpm/rpmdb.sqlite, **/usr/lib/sysimage/rpm/rpmdb.sqlite |
rpm | Link | |
| RPM mariner distroless package license files | *usr/share/licenses/*/COPYING*, *usr/share/licenses/*/LICENSE* |
rpm | Link | |
| RPM package archive | **/*.rpm, **/*.srpm |
rpm | Link | |
| RPM specfile | **/*.spec |
rpm | Link | |
| RPM yumdb metadata | **/var/lib/yum/yumdb/*/*/from_repo |
rpm | Link | |
| Swift Package Manager manifest JSON (Package.swift.json, Package.swift.deplock) | **/Package.swift.json, **/Package.swift.deplock |
swift | Swift | Link |
| Swift Package.resolved lockfile | **/Package.resolved, **/.package.resolved |
swift | Swift | Link |
| Swift show-dependencies deplock file | *swift-show-dependencies.deplock |
swift | Swift | Link |
| vcpkg manifest file | **/vcpkg.json |
vcpkg | Link | |
| Microsoft Update Manifest .mum file | *.mum |
windows-update | - | |
| Windows PE executable with VERSIONINFO package metadata | <windows executable and DLL files with VERSIONINFO resources> |
winexe | Link |