Byeongyong Kang/강병용

> $ cdxgen -t pnpm -p -o sbom.json --required-only --multi-project When I run from spec version 1.6 and the root path, it extracts all projects and libraries, but I'm wondering...

> [@kangqod](https://github.com/kangqod), have you tried `--exclude`? `--exclude packages/**` If this doesn't work, could you come up with a sample project so that we can see if there are any properties...

> [@kangqod](https://github.com/kangqod) Thank you for the sample repo. Using the filter argument appeared to work for me. `--filter "apps/web-v2/"` Can you look into the various filter [options](https://cyclonedx.github.io/cdxgen/#/ADVANCED?id=purl-and-properties-filter) and let me...

> [@kangqod](https://github.com/kangqod) try without the `--required-only` first.  The test results are as follows 1. unnecessary apps/web, packages/ui modules were extracted 2. apps/web-v2 is missing dependency modules like antd, clsx,...

`cdxgen -t pnpm -p -o sbom-web.json --filter name=web`  I removed --required-only and it showed all the sub-dependencies. But there doesn't seem to be a way to remove devDependencies. It...

> `--required-only` is the argument to retain components with `scope=required`. It usually works and mimics dev/non-dev for most projects. In your sample repo, everything is optional. Even the pnpm why...