specification icon indicating copy to clipboard operation
specification copied to clipboard

Support for dependency graph to better represent Software Heritage and OmniBOR ADG

Open prabhu opened this issue 1 year ago • 0 comments

Currently, dependencies is an array supporting two kinds of relationships - dependsOn (for dependency trees) and provides (for implementations). Both Software Heritage and OmniBOR supports advanced graphs that requires representing the nodes and edges of a graph in a raw form to support advanced queries such as identifying "neighbours" or tracking custom relationship between two blobs.

Access to such precise graph is necessary to unlock the next level of supply-chain analysis to operate at a granular blob level rather than at a component purl level.

prabhu avatar Apr 23 '24 10:04 prabhu