Wayne Beaton
Wayne Beaton
I played around with this a bit tonight. The CycloneDX folks produce a [CLI Tool](https://github.com/CycloneDX/cyclonedx-cli) that can convert an SBOM into various formats, including CSV. This seems to work: ```...
The Maven plugin uses the standard Maven resolution mechanism. We're entirely at the mercy of how Eclipse Tycho interacts with the Maven reactor. Are you invoking the tool with or...
I get a much longer list of dependencies when I turn the `tycho.target.eager` on. ``` $ mvn dependency:tree -Dtycho.target.eager=false | grep -Poh "(?
Let's take GitLab off the table. That was just me mumble-typing. Moving the repository will be sooo much easier than copying or re-creating. It would be good if we can...
I have committer office hours scheduled next week. I'll include this in the notice that precedes that an in the agenda. The EF will be in shutdown from December 22...
I've moved the repository to the `eclipse-dash` organisation. If anything breaks, please let me know ASAP and I'll undo the change.
I like the idea conceptually. If it works, let's do it.
Build time dependencies are still dependencies (i.e., "Build and Test Dependencies"). They're "works with", though, so we have considerable latitude with regard to licenses. The worst case scenario is that...
I've deferred doing very much proper exception handling. Clearly we need to do better. But this seems like an obvious incremental improvement. We should at least show the stack trace...
I've pushed a fix that should appear shortly in the 1.1.1-SNAPSHOT.