{"categories":[{"label":"Software Development","url":"https://skillfed.io/packages/category/software-development/16"},{"label":"Utilities","url":"https://skillfed.io/packages/category/utilities/9"}],"enrichment":{"capability":"Analyzes Docker images, containers, and virtual machine images to extract metadata, layers, Dockerfiles, and package inventories from saved image archives.","skillfed_tags":["docker-forensics","container-analysis","software-composition"],"use_cases":["Extract and analyze the layer structure of Docker images to understand how they were built and what files changed between layers.","Parse Dockerfiles and correlate them with actual saved Docker images to trace the relationship between build instructions and runtime artifacts.","Collect software package inventories from container images for supply-chain analysis or vulnerability scanning workflows.","Detect the base operating system and architecture of a container rootfs to support compatibility or compliance checks.","Reconstruct a flattened view of a container's runtime filesystem by layering saved image archives according to AUFS semantics."],"what_it_does":"container-inspector is a command-line and Python library suite for analyzing Docker images saved in the standard `docker save` format. It reads the layered structure of Docker images, parses their metadata, extracts Dockerfiles, and reconstructs what a runtime rootfs would look like by stacking layers according to AUFS conventions (including whiteout file handling). It also detects the Linux distribution of a rootfs using os-release files and can collect package and file inventories from images or layers using pluggable callable handlers.\n\nThe package is built on four runtime dependencies: click for CLI scaffolding, attrs for data modeling, dockerfile_parse for Dockerfile analysis, and commoncode for shared utilities. It targets modern Python (3.10+) on POSIX systems and is classified as production-stable, though its maintenance cadence has slowed.","worth_installing":"Yes, if you need to analyze Docker images offline or programmatically. The package is stable, has low install friction, and solves a specific problem (Docker image forensics and composition analysis) that few other tools address directly. The aging maintenance status and 205-day release gap are minor concerns for a tool focused on stable image format handling. No known vulnerabilities. Not worth installing if you only need to fetch images from registries or scan for vulnerabilities\u2014those are handled by related tools (ScanCode.io, ScanCode Toolkit)."},"id":"container-inspector","links":{"html":"https://skillfed.io/packages/container-inspector","md":"https://skillfed.io/packages/container-inspector.md","pypi":"https://pypi.org/project/container-inspector/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2026-01-21","license_spdx":null,"license_treatment":"permissive","name":"container-inspector","python_support":"supports_current","summary":"Docker, containers, rootfs and virtual machine related software composition analysis (SCA) utilities."},"popularity":{"monthly_downloads":124907,"position":11847,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"33.1.0"}