Jan Kowalleck
Jan Kowalleck
my thoughts: > [...] it's necessary to have the logical relationships between the packages and the actually required components in order to figure out an educated mitigation strategy if the...
Thanks for the feedback, @vanthome. > I tried to switch to @cyclonedx/cyclonedx-npm but lacks this feature. if you want to request a feature, please open a request in the dedicated...
the missing feature was requested via https://github.com/CycloneDX/cyclonedx-node-npm/issues/256 All questions were answered. An downgrade path was described. I consider this topic as closed. If further discussion is needed, then let me...
feel free to open a pull-request for the feature
@dependabot rebase
@dependabot rebase
was caused by https://github.com/CycloneDX/cyclonedx-python-lib/issues/52
i support the request. @madpah FYI this request might be a duplicate to https://github.com/package-url/packageurl-python/issues/65
@pombredanne how do you feel about the topic? i mean, we do have 3 options: * adding typing here in the project in code -- generally preferred * adding typing...
I thank you so much for your effort, @gruebel