Hover provider for manifest files

[nagarjunsanji]

Feature Title

Hover provider for manifest files

Description

As a user, I want to view information about licenses, vulnerabilities, and policy violations when looking at a manifest or lock file in the IDE extension.

Task

• SLP-style policy violations per dependency
  • Red underline for "fail pipeline"
  • Yellow underling for "warning"
• On Hover Pop-up that shows:
  • Policy violations (like SLP) -> output from scan (what is in the -f output)
  • License of dependency (API request)
  • Affected direct vulnerabilities (API request)
  • Affected transitive vulnerabilities (API request)

Acceptance Criteria

..

Motivation

No response

Alternatives

No response