ServiceDependency

Shape

• confidencenumber · floatHow certain the dependency is: 1.0 for anything the platform observed or a person stated, lower only for a derived one.
• from_service_idServiceId (string · uuid)
• kindDependencyKindpackageapidatastoreotherHow a service depends on the far end of a dependency — not what the far end is. The same library service can be consumed as a package by one service and called over HTTP by another.
• sourceDependencySourceobserved_lockfileobserved_publishdeclaredinferredHow a dependency came to be known, and therefore how far it can be trusted. A declared and an observed dependency between the same two services are reported separately, so a declaration no lockfile mentions, or a lockfile entry nobody declared, stands out.
• toServiceSummary

  • The ServiceSummary schema
  • display_namestring
  • group_idGroupId (string · uuid)
  • kindServiceKindservicelibrarywebsitejobdatastoreapiml_modelotherWhat sort of thing a service is. The kind decides which scorecard checks apply: a library has no deployments, so a deployment check is not applicable to it rather than failing. For your own classifications, use annotations.
  • lifecycleServiceLifecycleexperimentalproductiondeprecatedretiredWhere a service is in its life.
  • service_idServiceId (string · uuid)
  • slugServiceSlug (string)
  • sourceServiceSourceinferreddeclaredapiHow the catalog entry came to exist. Set by the platform, never accepted from a request. Any source other than inferred means a person has vouched for the entry.
  • externalbooleanoptional
  • orphaned_atstring or nulloptional
  • ownerOwnerRef or nulloptional
• detailDependencyDetailoptional

  • The DependencyDetail schema
  • formatPackageRegistryFormatnpmcargopypior nulloptionalThe package ecosystem a registry speaks. A group has at most one registry per format.
  • lockfile_pathstring or nulloptional
  • package_namePackageName (string) or nulloptional
  • resolvedstring or nulloptionalThe version the lockfile actually pins.
  • version_reqstring or nulloptionalWhat the manifest asked for, where the lockfile records it.
• observed_atstring or nulloptional
• observed_repoRepositoryId (string · uuid) or nulloptionalThe repository whose file established this dependency — a lockfile for an observed one, a catalog file for a declared one.
• observed_shastring or nulloptional

Graph

Used by