Open Source Haskell Dependency Managers

FOSSA CLI is a command-line tool that scans your codebase to identify open-source dependencies and their associated licenses and vulnerabilities. It integrates into CI/CD pipelines to provide automated compliance checks, license audits, and security analysis. Designed for enterprise software teams, FOSSA CLI helps enforce open-source policies at scale and provides accurate, automated insights into third-party software usage through deep analysis of transitive dependencies and ecosystem-specific configurations.

Niv is a tool designed for managing dependencies in Nix projects. It simplifies adding, updating, and removing package sources via a single nix/sources.json file, improving reproducibility and version control in Nix-based workflows. niv simplifies adding and updating dependencies in Nix projects. It uses a single file, nix/sources.json, where it stores the data necessary for fetching and updating the packages. Nix is a very powerful tool for building code and setting up environments. niv complements it by making it easy to describe and update remote dependencies (URLs, GitHub repos, etc). It is a simple, practical alternative to Nix flakes. The add command will infer information about the package being added, when possible. This works very well for GitHub repositories. Run this command to add jq to your project.