Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[TRACKING] CDX SBOM in npm-cli #1025

Closed
jkowalleck opened this issue Aug 10, 2023 · 1 comment
Closed

[TRACKING] CDX SBOM in npm-cli #1025

jkowalleck opened this issue Aug 10, 2023 · 1 comment

Comments

@jkowalleck
Copy link
Member

jkowalleck commented Aug 10, 2023 •
edited
Loading

🔎 track the effort of integrating CycloneDX SBOM in npm-cli
@jkowalleck jkowalleck pinned this issue Aug 10, 2023
@jkowalleck jkowalleck changed the title TRACK: SBOM in npm-cli [TRACK] CycloneDX SBOM in npm-cli Aug 10, 2023
@CycloneDX CycloneDX locked as resolved and limited conversation to collaborators Oct 16, 2023
@jkowalleck
Copy link
Member Author

jkowalleck commented Oct 24, 2024 •
edited
Loading

Results of over a year tracking npm-cli's efforts, without going into details:

npm-cli's implementation is unmaintained and flawed ...
see https://github.com/search?q=repo%3Anpm%2Fcli+sbom&type=issues

In contrast, this very tool here stays maintained and accurate.

@jkowalleck jkowalleck changed the title [TRACK] CycloneDX SBOM in npm-cli [TRACKING] CDX SBOM in npm-cli Oct 26, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jkowalleck