-
Couldn't load subscription status.
- Fork 22
Description
Currently there is a dependency with Go and Docker plugins due to how the package manager files are processed for the component analysis. The current implementation leverages the plugin's functionalities to extract and manipulate the dependencies info.
The downside of this is that when you install the RHDA plugin you see the Docker plugin as a require dependency regardless of whether your project has any Dockerfile. This causes a bad user experience.
For the Go plugin the problem is similar, if a user only wants to open a Go project and see the issues it shouldn't be required to have the Go extension to generate a report or get notified about a vulnerability issue. Specially because the Go plugin requires Goland or IntelliJ Ultimate.
The VSCode counterpart manipulates the files directly making it more generic and independent.
It would be great if we could investigate the possibility of removing such dependencies and implement a generic solution that does not depend on any additional plugin.