[PLANNING] VISION #8
Closed
jkowalleck
started this conversation in
Ideas
Replies: 2 comments 3 replies
-
the implementation is coming to an end, nearly all core features are implemented. MVP in reach. |
Beta Was this translation helpful? Give feedback.
0 replies
-
Which version of yarn does this support (and versions of the lock file)? |
Beta Was this translation helpful? Give feedback.
3 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
the users of the old https://github.com/CycloneDX/cyclonedx-node-module/tree/3.x
expected support for yarn,
but the yarn support was limited and flawed. see the closed-issues list of the project ...
to bring yarn support to the community, this dedicated project should solve the feature lack.
Goal
Responsibilities
Capabilities / Features
if this is not possible, the project could split for dedicated support of the versionsbecame optional; like nice to have; like if a low-hanging fruit, why not
Architecture
this project should utilize https://github.com/CycloneDX/cyclonedx-javascript-library
Option: yarn plugin
implement a yarn plugin, that adds a new yarn command an can produce the SBOM as expected.
https://yarnpkg.com/features/plugins
need to do a Prove of concept, that showed that the plugin can run a command, and this command has access to yarns internal data structures ...
or find other capabilities ....
misc
You want to contribute or champion this tool? ❤️ see #12
Beta Was this translation helpful? Give feedback.
All reactions