Arnout Engelen
Arnout Engelen
possibly - though perhaps we should get the implementation for https://github.com/CycloneDX/specification/issues/321 in (i.e. stripping the versions from the dependencies)?
filed #150 for that feature
Interesting find! It's hard to predict whether it'll be easier to pull in that dependency or to generate SPDX 'directly', but both approaches are worth a try!
> > I'm not at all sure that I like a major refactor just because a Java friendly terminate isn't implemented. I'm still skeptical as well - I suspect consistently...
> if we want to do breaking changes in 2.0.x series (such as removing the methods that work with `Future` for Java users) the changes have to land in Pekko...
> Its of course easier to just do all of the API changes in 2.0.x without caring about 1.x, but then it would be a big shock to users. Would...
(rebased to fix merge conflict)
> It's hard to tell if the action will be pre-approved. I think the Infrastructure team wildcard the version but we'll only find out when we merge this. (this has...
Rebased again to fix conflicts
> @mdedetrich has previously argued that test and build only dependencies can still affect users who run tests or other builds on their own machines. I'm on the fence because...