Reference C: Supported ecosystems

Detection covers the open-source ecosystems supported by the OSV.dev malicious packages dataset. Packages whose package manager does not map to a supported ecosystem are not evaluated.

Ecosystem	Package managers
npm	npm, Yarn
PyPI	pip, Pipenv, PyPI, uv
Maven	Maven, Gradle
NuGet	NuGet, Paket
Go	Go modules
RubyGems	Bundler
Packagist	Composer