Can I analyze a binary package, such as JAR or APK, for dependencies?
To scan dependencies of a JAR file, you will need to set the scan options to extract JAR files. If the JAR file contains any pom.xml files, the Dependency Analysis will work.
Other binary packages are not supported.
Does the Dependency Analysis work in an offline environment?
No, the ORT Analyzer retrieves the up-to-date package metadata from the public package repositories. The server where the Dependency Analysis is running needs to be connected to the internet.
Does the Dependency Analysis need the KB to function?
No, the Dependency Analysis is a completely standalone feature at the moment.