spdx-maven-plugin icon indicating copy to clipboard operation
spdx-maven-plugin copied to clipboard
verified publisher icon spdx

support for `maven-shade-plugin`

Open raboof opened this issue 1 year ago • 0 comments

When using maven-shade-plugin, the artifact should likely have a CONTAINS relationship with the shaded components, instead of a DYNAMIC_LINK.

I have a test/demo project for this at https://github.com/raboof/maven-shade-sbom/

raboof avatar Mar 06 '24 15:03 raboof