Skip to content

Why are there no build system plugins for ORT? #6881

Answered by sschuberth
sschuberth asked this question in Q&A
Discussion options

You must be logged in to vote

The ORT analyzer was specifically designed to inspect projects from the outside, ideally without the need to build the project or even install any project dependencies (which unfortunately is not possible with all package managers), for several reasons:

  • No effort for project development teams to change their build systems
  • No "vendor" lock-in
  • Projects over which you have no control (to add a build system plugin) can be analyzed
  • Projects that have no real build system can be analyzed (with the help of SPDX files)
  • There is no risk that project development team use outdated versions of such build system plugins

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by sschuberth
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
1 participant