getRecommendedComponentVersions
getRecommendedComponentVersionsReturns top dependency version recommendations ranked by Developer Trust Score with security, licensing, and quality analysis. Developer Trust Score is a measure of quality, security, licensing, and maintainability. Use this when selecting a new component to add to a project (without version) or when upgrading an existing component (with version). Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| packageUrls | Yes | Package URL (PURL) or list of PURLs identifying the component(s). Maven requires namespace (groupId). Version is optional: omit for new component recommendations (returns the best versions to start with), include for upgrade recommendations (returns better versions than the one specified). When providing multiple package URLs, limit to 20 maximum. |