Issues

• Framework-dependent libraries with  RuntimeIdentifiers  are misclassified as  library-selfcontained  (false-positive DOTNET-EOL-SC alerts)

  microsoft/component-detection#1893 · Filter by author vineethkuttan opened on Oct 10, 2026

• Dockerfile detector logs an error on BuildKit heredoc Dockerfiles (Valleysoft.DockerfileModel pinned to 1.2.0, predates heredoc support)

  microsoft/component-detection#1878 · Filter by author dcristoloveanu opened on Sep 22, 2026

• Vcpkg dependencies detected via vcpkg.spdx.json but not attributed to vcpkg.json (Explicitly Referenced is 0, despite valid manifest-info.json)

  microsoft/component-detection#1865 · Filter by author derekpiasecki opened on Sep 14, 2026

• Request: Add Gradle build-script dependency detection using the Gradle dependency engine

  microsoft/component-detection#1859 · Filter by author felickz opened on Aug 21, 2026

• [Request] Detecting go.work files

  microsoft/component-detection#1856 · Filter by author eschcam opened on Aug 6, 2026

• SVG icon

  microsoft/component-detection#1834 · Filter by author remcohaszing opened on Jun 28, 2026

• Component-detection 7.1.2 fails to start on MacOS

  microsoft/component-detection#1815 · Filter by author ycollet opened on May 20, 2026

• NpmComponentDetector unconditionally skips packages with engines.vscode, causing false negatives for products that ship built-in extensions

  microsoft/component-detection#1772 · Filter by author benvillalobos opened on Apr 8, 2026

• Service to centrally track and cleanup generated files in detectors

  type:feature
  Feature

  microsoft/component-detection#1758 · Filter by author zhenghao104 opened on Apr 2, 2026

• Distro release is included in LinuxComponent.Id but not Purl

  microsoft/component-detection#1714 · Filter by author alisonlomaka opened on Mar 13, 2026
  3

• Ruby gem versions don't follow pure semantic versioning

  microsoft/component-detection#1598 · Filter by author cwize1 opened on Dec 15, 2025

• Root package issue when scanning uv repository

  microsoft/component-detection#1586 · Filter by author lampham-nttdata opened on Dec 5, 2025

• Ivy scan fails when ivy.jar is missing

  microsoft/component-detection#1573 · Filter by author lampham-nttdata opened on Nov 26, 2025

• Pnpm 6 Detector should also ignore link: versions in package dependencies

  microsoft/component-detection#1555 · Filter by author dmichon-msft opened on Nov 22, 2025

• locationsFoundAt specifies URL-encoded paths

  microsoft/component-detection#1476 · Filter by author lxop opened on Oct 23, 2025

• verification tests broken after charset-normalizer 3.4.4 published

  microsoft/component-detection#1473 · Filter by author cataggar opened on Oct 14, 2025

• There is a bug when the tool calls Rust's Cargo Metadata command and there is a space in the path

  microsoft/component-detection#1467 · Filter by author HotCakeX opened on Sep 19, 2025

• Allow DefaultOff detectors to be used exclusively

  microsoft/component-detection#1457 · Filter by author lanni-energinet opened on Aug 5, 2025

• DetectorCategories Argument Documentation Incorrect

  microsoft/component-detection#1435 · Filter by author ljones140 opened on Jun 12, 2025

• Stop releasing Microsoft.ComponentDetection nuget package

  microsoft/component-detection#1423 · Filter by author thompson-tomo opened on Jun 6, 2025
  5

• Tests fail on Windows

  microsoft/component-detection#1411 · Filter by author RodneyRichardson opened on May 23, 2025
  2

• NpmComponentDetector doesnt detect dependencies

  microsoft/component-detection#1405 · Filter by author edena-legit opened on May 15, 2025

• Fix support for Paket on .NET ecosystem

  microsoft/component-detection#1404 · Filter by author Thorium opened on May 12, 2025
  2

• Add support for dotnet run project metadata

  detector:nuget
  microsoft/component-detection#1383 · Filter by author JamieMagee opened on Apr 14, 2025

• Npm package-lock.json components not detected if peer = true and dev = true

  microsoft/component-detection#1380 · Filter by author RushabhBhansali opened on Mar 29, 2025