Niklas

@stevespringett Yes. But the DT PR should be merged shortly after, otherwise its builds will fail due to the reliance on the current Alpine SNAPSHOT.

As you have already noticed, the underlying issue has been fixed in DN and I raised a PR for an update to the latest 5.2.x versions in #382. But it...

DataNucleus 6.0.0 was released a few days ago: https://www.datanucleus.org/documentation/news/access_platform_6_0.html#_datanucleus_accessplatform_6_0_0_release Migration guide: https://www.datanucleus.org/products/accessplatform_6_0/migration.html DN also supports H2 2.x now.

I started to work on an OpenID Connect implementation a few days ago (https://github.com/nscuro/Alpine/tree/10-openidconnect-support). I did check out pac4j and google-oauth-java-client and found pac4j to be too invasive. For a...

Hi @kotakanbe, I'm the maintainer of cyclonedx-go and [cyclonedx-gomod](https://github.com/CycloneDX/cyclonedx-gomod) and just stumbled over this issue. Are you still interested in this? I can get a PR ready if you want....

I really like the idea, and I understand that there's immediate need for something like this. In fact, I have a pending issue that could make great use of it:...

I'd like to use this in the upcoming v1.0.0 release of cyclonedx-gomod. That would be the `cdx:gomod` namespace. How can I assist in progressing this topic?

@coderpatros Thanks for setting up the repo. Looks good to me. Maybe the syntax section could be extended so that namespaces SHOULD prefer to use lowercase letters. It would be...

Thanks @samj1912! Happy to answer any questions regarding cdx-gomod, or discuss improvements that may be necessary for it to be a viable option for Syft 🙂

Totally agree that Syft's core should stay true to the philosophies listed. Having tools with minimal runtime dependencies is super useful (and even required in some environments). I'd be happy...