cyclonedx-node-module icon indicating copy to clipboard operation
cyclonedx-node-module copied to clipboard

Published 20 hours ago • verified publisher icon CycloneDX

v4.0

Open jkowalleck opened this issue 1 year ago • 2 comments

:construction: still in the making.

path to go: have this package be a simple wrapper for the following:

  • YARN: https://github.com/CycloneDX/cyclonedx-node-yarn
  • NPM: https://github.com/CycloneDX/cyclonedx-node-npm
  • PNPM: tbd
  • PARCEL: tbd

each should be using https://github.com/CycloneDX/cyclonedx-javascript-library/ and be implemented in the way the ecosystems requires it to be.

this PR contradicts #298 as it will make this project kind of obsolete/dedicated ... a solution could be to actually mark this project as "dedicated" at npnjs.org and archive the repo on github.

jkowalleck avatar Jul 23 '22 08:07 jkowalleck

@jkowalleck Does this mean you are planning to add support for PNPM?

weyert avatar Jul 24 '22 23:07 weyert

@weyert

Eventually there will be support for pnpm. I am planning to divide this project in multiple independent parts that are dedicated to the specific ecosystems.

jkowalleck avatar Jul 25 '22 06:07 jkowalleck

@jkowalleck Hello Jan, quick question: Will Version 4 support the schema version 1.4 as well? As I need to use schema version 1.4, do you know when it will be merged (if it actually does support it 😃 )

DrMueller avatar Sep 12 '22 09:09 DrMueller

@DrMueller

spec v1.4 support is already available as a library: https://www.npmjs.com/package/%40cyclonedx/cyclonedx-library and for NPM projects a generator exists: https://github.com/CycloneDX/cyclonedx-node-npm

jkowalleck avatar Sep 12 '22 11:09 jkowalleck

@DrMueller

spec v1.4 support is already available as a library: https://www.npmjs.com/package/%40cyclonedx/cyclonedx-library and for NPM projects a generator exists: https://github.com/CycloneDX/cyclonedx-node-npm

Ah I see, thank you very much.

DrMueller avatar Sep 13 '22 05:09 DrMueller