phylum-dev / vuln-reach

A library for building tools to determine if vulnerabilities are reachable in a code base.

Home Page:https://phylum.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Allow for multiple kinds of resolvers

andreaphylum opened this issue · comments

We may want to allow mixing-and-matching resolvers. Consider the use case of someone who builds a test project in plain files to search for reachabilities, but wants to keep their dependencies as tarballs.

We currently only allow one type of module resolver in a project; we'd have to resort to dynamic dispatch in order to use trait objects as resolvers.