ProjectScanner
Reads dependency and platform facts from the manifests and lockfiles of one project directory, and the imports and call-site signals of its source files (listed with find). Nothing touches the network; a file that is absent or does not parse adds no attributes. Keys are project.<ecosystem>.<name>.