sbom4python icon indicating copy to clipboard operation
sbom4python copied to clipboard

Consider using builtin importlib.metadata

Open EvaSDK opened this issue 1 year ago • 1 comments

Using pip show to collect package metadata only returns a select few metadata of a package. Using importlib.metadata would allow accessing to all of them, such as Download-URL, Project-URL, and Maintainer. See https://packaging.python.org/en/latest/specifications/core-metadata/. This should make the code slightly faster and more reliable.

EvaSDK avatar Aug 16 '24 14:08 EvaSDK

Thanks for the suggestion.

anthonyharrison avatar Aug 17 '24 19:08 anthonyharrison