CycloneDX/cyclonedx-node-npm issues and pull requests

#1195 - tests: more tests

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: QA

#1194 - tests: tests are less noisy

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: QA

#1193 - chore(deps-dev): bump the eslint group across 1 directory with 2 updates

Pull Request - State: open - Opened by dependabot[bot] 4 months ago
Labels: dependencies

#1192 - BC: drop support for `node<18`

Issue - State: open - Opened by jkowalleck 4 months ago
Labels: breaking-change

#1191 - feat: git url sanitation

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: enhancement

#1190 - chore(deps): bump commander from 10.0.1 to 12.1.0

Pull Request - State: open - Opened by dependabot[bot] 4 months ago
Labels: dependencies

#1189 - feat: more debug when loading package manifests

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: enhancement

#1188 - Missing license information on the components

Issue - State: closed - Opened by iamrahul127 4 months ago - 3 comments
Labels: invalid

#1187 - feat: try sanitize dist urls

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: enhancement

#1186 - test: alternative package registry

Pull Request - State: closed - Opened by jkowalleck 4 months ago - 1 comment
Labels: QA

#1185 - tests: more cov

Pull Request - State: open - Opened by jkowalleck 4 months ago - 1 comment
Labels: QA

#1184 - chore(deps-dev): bump the eslint group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies

#1183 - feat: license acknowledgement

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: enhancement, schema 1.6

#1182 - chore(deps-dev): bump the eslint group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies

#1181 - chore: reduce duplicate test beds

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: QA, CI, chore

#1180 - chore: reduce duplicate test beds

Issue - State: closed - Opened by jkowalleck 5 months ago
Labels: QA, CT, chore

#1179 - ci: use node22

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 2 comments
Labels: CI, CT, chore

#1178 - ci: modernize artifact action

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: dependencies, CI, chore

#1177 - chore(deps-dev): bump the eslint group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies

#1176 - chore(ci): fix macos runners

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: chore

#1175 - feat: explicitely support CycloneDX 1.6

Pull Request - State: closed - Opened by jkowalleck 5 months ago - 1 comment
Labels: enhancement, schema 1.6

#1174 - docs: add CycloneDX 1.6 to README

Pull Request - State: closed - Opened by XSpielinbox 5 months ago - 2 comments
Labels: documentation

#1173 - Change default spec version to latest

Issue - State: open - Opened by XSpielinbox 5 months ago - 1 comment
Labels: breaking-change

#1172 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies

#1171 - mark licenses as "declared"

Issue - State: closed - Opened by jkowalleck 6 months ago - 1 comment
Labels: enhancement, schema 1.6

#1170 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#1168 - migrate from `eslint-config-standard-with-typescript` to `eslint-config-love`

Issue - State: open - Opened by jkowalleck 6 months ago
Labels: dependencies, chore

#1167 - chore(deps-dev): bump typescript from 5.4.2 to 5.4.5 in the typescript group

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 2 comments
Labels: dependencies

#1166 - chore(deps-dev): bump typescript from 5.4.2 to 5.4.4 in the typescript group

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#1165 - chore(deps-dev): bump eslint from 8.57.0 to 9.0.0 in the eslint group

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#1164 - cyclonedx/cyclonedx-npm doesn't generate sbom file with a licences

Issue - State: closed - Opened by zeenmc 6 months ago - 1 comment
Labels: question

#1163 - chore(deps-dev): bump the typescript group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#1162 - publish package to `GithubPackages`

Issue - State: open - Opened by jkowalleck 7 months ago
Labels: chore

#1161 - chore: modernize `npm-run-all`

Issue - State: open - Opened by jkowalleck 7 months ago
Labels: chore

#1160 - chore(deps-dev): bump the typescript group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 2 comments
Labels: dependencies

#1159 - chore(deps): bump softprops/action-gh-release from 1 to 2

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies

#1158 - tests: run with latest CDX spec-version

Pull Request - State: closed - Opened by jkowalleck 7 months ago - 1 comment
Labels: CT

#1157 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies

#1156 - chore(deps): bump sanitize-html from 1.4.2 to 2.12.1 in /demo/juice-shop/project

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 2 comments
Labels: dependencies, javascript

#1155 - feat: Only fetching first level of dependencies

Issue - State: open - Opened by benno85 7 months ago - 5 comments
Labels: enhancement, question

#1154 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 3 comments
Labels: dependencies

#1153 - chore(deps-dev): bump the eslint group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies

#1152 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies

#1151 - feat: set devDependencies `component.scope` to `excluded`

Issue - State: open - Opened by jkowalleck 8 months ago
Labels: enhancement, good first issue, help wanted

#1150 - chore(deps): bump commander from 10.0.1 to 12.0.0

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 6 comments
Labels: dependencies

#1149 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies

#1148 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies

#1147 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies

#1146 - refactor: fix typescript-eslint annotations

Pull Request - State: closed - Opened by jkowalleck 8 months ago - 1 comment

#1145 - fix: large results on small streams

Pull Request - State: closed - Opened by jkowalleck 9 months ago - 1 comment
Labels: bug

#1144 - Support pedigree

Issue - State: closed - Opened by vetsin 9 months ago - 1 comment
Labels: enhancement, question

#1142 - Allow programmatic usage of SBOM builder

Issue - State: closed - Opened by skhokhlov 9 months ago
Labels: enhancement

#1141 - chore(deps): bump actions/download-artifact from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 3 comments
Labels: dependencies

#1140 - chore(deps): bump actions/upload-artifact from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 3 comments
Labels: dependencies

#1139 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies

#1138 - Escalate various log messages

Pull Request - State: closed - Opened by jkowalleck 10 months ago - 1 comment
Labels: enhancement

#1137 - more logs: skipped validation if requested

Issue - State: closed - Opened by jkowalleck 10 months ago
Labels: enhancement

#1136 - refactor & bump `[email protected]`

Pull Request - State: closed - Opened by jkowalleck 10 months ago - 1 comment

#1135 - hardened JSON imports

Pull Request - State: closed - Opened by jkowalleck 10 months ago - 1 comment

#1134 - chore(deps-dev): bump the eslint group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 4 comments
Labels: dependencies

#1133 - chore(deps-dev): bump the typescript group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies

#1132 - feat: hardened JSON imports

Pull Request - State: closed - Opened by jkowalleck 10 months ago - 1 comment
Labels: enhancement

#1131 - feat: more logs & configurable log level

Pull Request - State: closed - Opened by jkowalleck 10 months ago - 2 comments
Labels: enhancement

#1130 - ci: test more node versions

Pull Request - State: closed - Opened by jkowalleck 10 months ago - 1 comment
Labels: QA, CI, chore

#1129 - refactor: use sophisticated logger

Pull Request - State: open - Opened by jase88 10 months ago - 6 comments

#1128 - chore(deps-dev): bump the eslint group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies

#1127 - [FEAT]: Add Silent or Quiet flag for CLI

Issue - State: closed - Opened by jase88 10 months ago - 4 comments
Labels: enhancement

#1126 - [FEAT] support workspaces

Issue - State: open - Opened by jkowalleck 10 months ago - 2 comments
Labels: enhancement, good first issue, help wanted

#1125 - chore(deps-dev): bump the typescript group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies

#1124 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies

#1124 - chore(deps-dev): bump the eslint group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies

#1123 - docs: fix typos

Pull Request - State: closed - Opened by jkowalleck 11 months ago - 1 comment
Labels: documentation

#1123 - docs: fix typos

Pull Request - State: closed - Opened by jkowalleck 11 months ago - 1 comment
Labels: documentation

#1122 - fix: excplicitely require direct dependency `packageurl-js`

Pull Request - State: closed - Opened by jkowalleck 11 months ago - 1 comment
Labels: bug, dependencies

#1121 - fix: detect integrity hashes sha256 sha384

Pull Request - State: closed - Opened by jkowalleck 11 months ago - 1 comment
Labels: bug

#1120 - fix: move distribution hashes where they belong

Pull Request - State: closed - Opened by jkowalleck 11 months ago - 1 comment
Labels: bug

#1119 - chore(deps-dev): bump the eslint group with 1 update

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#1118 - [BUG] hashes on wrong element

Issue - State: closed - Opened by jkowalleck 11 months ago
Labels: bug, good first issue, help wanted

#1116 - Hello, I am a novice, for yarn or pnpm managed projects, can I also use cyclonedx-npm to generate sbom, how to use it

Issue - State: closed - Opened by wzd-hash 11 months ago - 1 comment

#1109 - [BUG] In context of npm workspaces (monorepo), sbom generation for workspace does not work if workspace does not contain node_modules (even if empty)

Issue - State: closed - Opened by Donorlin about 1 year ago - 2 comments
Labels: bug

GitHub / CycloneDX/cyclonedx-node-npm issues and pull requests