deptools provide a simple source dependency tracking tool for building source project from several distinct components hosted in different repositories and repository formats. It is an import of an older tool called dependencies that was used for tracking dependencies between different source code repositories.
For instance it aims at solving problem such as: - sources of project A depends upon sources of project B at revision X in branch B and file F in path P, - extracting project A will extract B under directory b and F under filename f. - the revision of source tree A is sufficient to uniquely identify A and all its source dependencies, - easily identify, extract, commit, update all components at once.
It does not solve the orthogonal problems of: - how to build source dependencies, - cache build results, - specify runtime dependencies.
There are no reported vulnerabilities