Niklas

@surajbora59 This shouldn't require a new table at all. As you found out, the `details` information is already persisted, it's just that the audit trail is not properly populated. This...

The problem here is that, when submitting the BOM in a single JSON request like this: ```json { "projectName": "acme-app", "projectVersion": "1.0.0", "bom": "" } ``` the protection mechanism of...

Given there is already the `POST /api/v1/bom` endpoint that takes a `multipart/form-data` request, which does not suffer from this limitation, I don't believe there is value in raising the character...

FWIW, if you're running Postgres, you can simply `ALTER` the column definitions from `VARCHAR(255)` to `VARCHAR(somelargenumber)` or even `TEXT` (which is unlimited length). Postgres stores `VARCHAR(X)` and `TEXT` the same...

We can remove the `@Size` annotations from PURL fields, which means that users can manually change their schema to accommodate for larger values. As mentioned above, for PostgreSQL it won't...

I had another look at this: * MySQL has an index key length limit of 192 when using unicode collation * MSSQL < 2016 has an index key length limit...

@Aster-Lin Can you provide example SBOMs and screenshots / API responses you're getting for them? I am not super clear what exactly the defect is yet, but if ordering of...

The query in question is executed during NVD mirroring. Unfortunately it is a heavy operation by nature, as it has to create and / or update hundreds of thousands of...

The BOM contains a `component` where the `name` is either empty, or not present at all. [Component names are a mandatory field](https://cyclonedx.org/docs/1.5/json/#components_items_name) according to the specification, so the BOM is...

Great suggestion! Some additional notes: * Excluding components may break the dependency graph * The omission of components must be communicated in the BOM, e.g. by: * Adding a [property](https://cyclonedx.org/docs/1.5/json/#properties)...