sbom-tool icon indicating copy to clipboard operation
sbom-tool copied to clipboard

The Maven dependencies graph is different from other package managers

Open kennylam91 opened this issue 10 months ago • 6 comments

With the release of V3, I see that sbom-tool can generate correct relationships between packages. But somehow the relationship graph of Maven is different from others. For example here is a npm project graph: Image But for maven, it always has another maven root package besides sbom root package. Image This causes issues when we want to get all direct dependencies, for example.

Do you think we should do something about this?

kennylam91 avatar Dec 06 '24 08:12 kennylam91