ruby

type Decomposer struct{}

type GemLockfile struct {
	// Sources are the lock's spec blocks: the registry (GEM), git
	// repositories (GIT) and local paths (PATH), each holding the specs
	// resolved from it.
	Sources []*GemSource

	// Platforms are the platforms the lock resolves for.
	Platforms []string

	// Dependencies are the direct requirements (the DEPENDENCIES
	// section): every gem the Gemfile names, whatever its group.
	Dependencies []string

	// Checksums maps "name version[-platform]" to the artifact's sha256,
	// present when the lock was written with checksums (Bundler 2.6+).
	Checksums map[string]string

	// BundledWith is the Bundler version that wrote the lock.
	BundledWith string
}

type GemSource struct {
	// Type is "gem", "git" or "path".
	Type string

	// Remote is the registry URL, repository URL or local path.
	Remote string

	// Revision, Tag and Branch pin a git source; Revision is the exact
	// commit.
	Revision string
	Tag      string
	Branch   string

	Specs []*GemSpec
}

type GemSpec struct {
	Name    string
	Version string

	// Platform is the variant's platform ("x86_64-linux-gnu"), empty for
	// the pure-Ruby variant. The same gem and version may appear once per
	// platform the lock covers.
	Platform string

	// Dependencies are the names the spec depends on; the lock resolves a
	// name to exactly one version, so names are edges.
	Dependencies []string

	// Source points back at the block the spec came from.
	Source *GemSource
}

type Options struct {
	// Platform targets an operating system and architecture, as os[/arch]
	// in Go's vocabulary; it selects among a gem's platform variants and
	// outranks the generic --platform. Empty means the platform unpack
	// runs on.
	Platform string

	// Concurrency controls the parallel requests to rubygems.org when
	// enriching (default: 10).
	Concurrency int
}

type RubyGemsClient struct {
	Agent   *khttp.Agent
	BaseURL string
}