Populate reusedCode Field from Dependency Files

[sachin-panayil]

Update the automated code.json GitHub Action to parse dependency files (package.json, requirements.txt) and automatically populate the relatedCode field in code.json with detected dependencies. Common dependencies like USWDS should be recognized and mapped to their appropriate metadata. This reduces manual effort and keeps the relatedCode field accurate as dependencies evolve.

[natalialuzuriaga]

06/30:

My mistake: let's not do relatedCode since this field deals with classifying repositories that are under the same project. Instead, let's focus on populating the reusedCode field since this deals with direct dependencies of the repository. Metadata schema info here: https://dsacms.github.io/share-it-act-lp/schema/#code-json-fields

Proposed Rotation Structure:

• Phase 1: Implement using USWDS and CMS Design System packages
• Phase 2: Research and brainstorm approaches to creating the curated list. Use info from various GitHub organizations, known federal npm orgs, and keywords, look into SBOMs, and other methods
• Phase 3: Use code-gov to cross-check for dependencies since this website serves as an inventory for all federal source code! (Future phase, maybe after Congressional Dashboard Rotation)

[natalialuzuriaga]

Related to #94

[natalialuzuriaga]

07/06:

• ACTION: Update ticket name
• PR is up for Phase 1: Populate reusedCode from USWDS and CMS Design System dependencies by haseebmalik18 · Pull R… @haseebmalik18
• @haseebmalik18 went through npm packages dataset maintained by Google and created a script to pull fed projects
• ACTION: Use python packages dataset maintained by Google in the script @haseebmalik18

[decause-gov]

07/10:

• Previous actions completed
• Phase1 PR awaiting review: Phase 1: Populate reusedCode from USWDS and CMS Design System dependencies #125 @sachin-panayil
• Phase2 PR Draft: Phase 2: Expand reusedCode detection to federal npm and PyPI dependencies #126
• GOAL: Look into automating the list of dependencies

[decause-gov]

07/13:

• Phase1 PR is merged! Phase 1: Populate reusedCode from USWDS and CMS Design System dependencies #125
• ACTION: @haseebmalik18 complete phase 2 dev by EoW
• GOAL: Research different ways of automating the generated list of dependencies (in addition to GCP)

[decause-gov]

07/17:

• Phase2 PR is ready for review: Phase 2: Expand reusedCode detection to federal npm and PyPI dependencies #126 @sachin-panayil @natalialuzuriaga
• ACTION: @haseebmalik18 Catch up with @natalialuzuriaga now that she's back from PTO (after Tues)
• GOAL: Research different ways of automating the generated list of dependencies (in addition to GCP)

[decause-gov]

07/20:

• ACTION: @sachin-panayil @natalialuzuriaga Review PR for phase 2: Phase 2: Expand reusedCode detection to federal npm and PyPI dependencies #126
• ACTION: @haseebmalik18 Catch up with @natalialuzuriaga now that she's back from PTO (after Tues)
• GOAL: Research different ways of automating the generated list of dependencies (in addition to GCP)

[decause-gov]

07/24:

• ACTION: @haseebmalik18 changes requested for PR for phase 2: Phase 2: Expand reusedCode detection to federal npm and PyPI dependencies #126
• INFO: Met with nat and made implementation plan
• ACTION: @haseebmalik18 start following the plan next week!
• GOAL: List should be automated by EoW!