#dependencymanagement

We're excited to share the latest update to **LibTracker**, our lightweight dependency tracking extension for Visual Studio Code.

LibTracker gives developers a streamlined way to identify outdated packages, address known security vulnerabilities, and monitor licensing issues—all within their IDE.

**Now with Full PHP Composer Support**

Our latest release includes robust support for PHP projects using Composer. You can now:

* Track and manage Composer dependencies directly in LibTracker

* Add custom messages to your backup notes for easier tracking and differentiation

* Access improved changelog link parsing for faster insights

* Benefit from more accurate and intuitive terminology around security alerts

**Access the Extension**

Explore the tool and streamline your dependency management workflow:

[https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker](https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker)

**What’s Next**

We’re actively working on expanding support for:

* Flutter and Java (Gradle & Maven) projects

* Python environments

* Bundled dependencies to ensure the extension is fully plug-and-play

Managing dependencies is one of the most critical aspects of modern software development. With LibTracker, our VSCode extension, we’re empowering developers to maintain up-to-date, secure, and compliant applications effortlessly.

View your app's dependencies at a glance, identify outdated versions, fix security vulnerabilities, and address problematic licensing—all in one streamlined tool.

Access LibTracker here: [Visual Studio Marketplace](https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker)

New Features:

- Dependency Insights: Now see the latest available version and the recommended stable version for each dependency. The stable version aligns with your package manager's suggestions, helping you make safe updates without risking app stability.

- Enhanced Usability: Added action icons with tooltips for a more intuitive experience.

- Unused Code Detection: Identify unused packages and imports with ease.

- Edge Case Handling: Improved handling for non-registry packages, ensuring you receive as much information as possible.

Upcoming Enhancements:

- Progress Indicators: Visualize progress for checks like outdated versions, unused dependencies, and pre-fetch operations.

- Collapsible Action Icons: Streamline the interface by collapsing less frequently used tools.

- Advanced Filters: Add glob or regex-based ignore patterns for app subpath searches.

- Git-Based Backups: Explore using Git instead of the filesystem for enhanced backup reliability.

- App Detail Page Improvements:

  - Display CVE information.

  - Advanced search functionality.

  - Responsive design with card-based layouts for better readability.

Future Goals:

- SBOM Generation: Automatically create a comprehensive Software Bill of Materials for your projects.

- License and CVE Summaries: Summarize key insights using URLs or AI-generated categories.

- Subdependency Insights: Enable direct navigation to subdependencies within the license pane.

*  Greetings everyone working on my LibTracker Vscode Extension. Get to personally know your apps with this simple SBOM Tool.  View at a a glance and fix outdated versions, security vulnerabilities and problematic licensing.

* You can access here https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker.

# New Features

- Smart Expand/Collapse: Expand/Collapse all items in a category when opened. Expand all items in a category when opened.

- get license info about every version of  every package of the app along with its subdependencies

- toggle select all apps in project detail page

# Next Goals

- recursion exclusion list

- (mabye) workspace folder

  - (depends on capabilbility of vscode api to access vscode profiles)

- git backup changes

- app detail page

  - cve info

  - search (root row is possible but useless search every nested child row)

  - responsiveness app detail page can tabulator turn to  series of cards

- Generate SBOM

- URL or AI summary of categories and names for licenses and CVES

At Windmillcode, we are committed to equipping organizations with tools that enhance software development efficiency and security. Our latest updates to **LibTracker**, a cutting-edge VSCode extension, reinforce our mission to simplify dependency management and provide actionable insights for your applications.

**Access LibTracker today**: [Visual Studio Marketplace](https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker)

### **Recent Enhancements**

- **Enhanced Import/Export Capabilities**:

  - Flexible options to append, overwrite, or intelligently merge projects and apps with matching names, streamlining SBOM updates.

  - Comprehensive import validation to eliminate errors and ensure accuracy.

- **Expanded Application Coverage**:

  - Broader support now includes all npm applications, providing unparalleled flexibility for developers managing diverse tech stacks.

### **Looking Ahead**

Our roadmap reflects our commitment to continuous improvement and user-focused innovation:

- **Advanced App Detail Page**:

  - Security management tools for adding, updating, or removing dependencies, with options for version control.

  - Snapshot functionality to safeguard against unintended impacts of updates or testing changes.

  - Bulk update options to save time and effort.

- **Performance Enhancements**:

  - Refreshed refresh logic and optimized caching for faster, more reliable operations.

Mit der Annotation Grapes kannst du innerhalb deines Apache Groovy Scriptes ein recht einfaches aber mächtiges Dependencymanagement verwalten bw. einrichten.

Wenn wir normalerweise ein Projekt mit Abhängigkeiten (Dependencies) aufsetzen so benötigen wir ein Maven, Gradle, Ivy oder ähnliches welches diese für uns im Projekt herunterlädt und bereithält. (Oder du ladest die *.jar Datei herunter und legst diese in deinem Projekt ab.) Beide Wege sind natürlich auch in Groovy möglich, jedoch kann du dir dieses mit Grapes deutlich vereinfachen. Du benötigst vor deinem Aufruf lediglich die Annotation @Grapes mit den Daten zur Dependency welche du zbsp. aus dem Maven Repository ablesen kannst.

Ein Beispiel mit Apache-Commons-Lang3

Die wohl bekannteste Bibliothek ist die apache-commons-lang3, diese bietet eine Vielzahl an nützlichen Funktionen, welche einem das Programmieren deutlich erleichtert. Im Maven Repository dieser Bibliothek finden wir Einträge zu den gängigen Dependencymanagement Systemen und ebenso auch für Grape.