cyclonedx-python-lib

cyclonedx-python-lib copied to clipboard

`LicenseExpression`'s optional arguments should be named arguments

1

current implementation has an architectural lock in: `LicenseExpression`'s optional arguments are positional arguments. it would be better to have them as named arguments, so we could rearrange these arguments at...

jkowalleck

Improvement: Apply Regex check to `Component.cpe`

4

The CycloneDX scpecification defines a Regex for `Component.cpe`, but this library does not enforce this. see https://github.com/CycloneDX/specification/blob/c320fc0f0b46873864927d9d5684eea7ba439728/schema/bom-1.5.xsd#L1110-L1112

madpah

License issue GPL dependency rfc3987

5

[cyclonedx-python](https://github.com/CycloneDX/cyclonedx-python) (cyclonedx-bom==4.1.2) depends via cyclonedx-python-lib==6.4.3 on the package jsonschema, but with the special option format (jsonschema[format]). This introduces the GPL dependency of package rfc3987, which I think is not the...

kdekker-kdr4

fixes https://github.com/CycloneDX/cyclonedx-python-lib/issues/537

jkowalleck

[DOCS] list responsibilities and capabilities

1

list responsibilities and capabilities in README. similar to - -

jkowalleck

JSF is/has been incorporated into the core spec for Version 1.4 (JSON). This feature will delivery JSF support. This feature was bumped from the initial release (#108).

madpah

[DOCS] showcases, examples & general docs improvements

5

:mega: THIS IS A CALL FOR DOCS Feel free to add pull requests with examples here: - https://github.com/CycloneDX/cyclonedx-python-lib/tree/main/examples - https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/docs/examples.rst ---- There are currently no (complex) examples how to use...

jkowalleck

now taht we have validators, it should be possible to write an importer, like the `outputter`s ... it should take an arbitrary string, detect the schema from it, and validate...

jkowalleck

now that a package `validation` was established via https://github.com/CycloneDX/cyclonedx-python-lib/issues/432, t should be possible to move the data model validation there, too.\ data model validation is getting more and more complex...

jkowalleck

Changelog for 7.3.3 basically unreadable

3

There's lots of HTML code mixed in and I can't make heads or tails of it. Can you please improve its formatting? Thank you. ---- https://github.com/CycloneDX/cyclonedx-python-lib/releases/tag/v7.3.3

0-wiz-0