Jan Kowalleck

since node12/es6 classes may have private properties - starting with `#` see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Classes/Private_class_fields currently `_` is used to mark properties as internal. goal: use `#` ---- this is considered a...

in the JavaScript/node ecosystem, it is common to pack/transpile/transform source code for a target system. babel, webpack, esbuild, ... these tools are usually used for the tasks. tools minify code...

bump integration tests: use non-vulnerable components

1

there are integration tests in [`tests/integration/*/package.json`](https://github.com/CycloneDX/cyclonedx-node-module/tree/master/tests/integration) that may have npm compo ents that are vulnerable. The code in these packages is never actually run. SecurityScanners often find new or the...

drop `read-installed`

2

@DarthHater reported `read-installed` being end of live. He suggested to switch to [`@npmcli/arborist`](https://www.npmjs.com/package/@npmcli/arborist). `read-installed` also semas to be causing a lot of issues. see other/related/linked issues. ---- acc/crit: - have...

:construction: this ISSUE IS STILL A **DRAFT** :construction: ---- based on current implementation - restructure the project: * bin/ * make-bom.js - if it is desired, multi-purpose wrapper for npm/yarn...

fie `bin/cyclonedx-bom` is deprecated. file still exists for compatibility reasons. see #224 a a developer i want this file removed, so all JavaScript files have a proper file extension `.js`....

current implementation is untyped undocumented javascript as a user of this library i want type docs, so that i know expected parameter types. as a user of this library i...

from spec 1.4 on the Component's `version` is no longer required. therefore it may be undefined and can be omitted when normalizing to JSON or to XML. an empty version...

part of #226

requires https://github.com/CycloneDX/specification/issues/106 ---- the current JSON result follows an existing schema, described in https://github.com/CycloneDX/specification/tree/master/schema **feature request:** add the used schema as a property `$schema` of the resulting json. the value...