AppThreat / AppThreat/custom-json-diff

Support package type specific diff

Open
#21 0 comments 0 reactions 0 assignees View on GitHub
needs sponsor
Dominant language
Python
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Consider the attached bom files

This includes packages of type debian and npm.

[bom-docker.json](https://github.com/user-attachments/files/15764395/bom-docker.json)

The below two only include packages of type npm
[bom-pre-build-reqonly.json](https://github.com/user-attachments/files/15764394/bom-pre-build-reqonly.json)
[bom-pre-build.json](https://github.com/user-attachments/files/15764397/bom-pre-build.json)

When computing the diff, there could be an option to first group based on the package type and compute type specific diffs in addition to aggregate diffs. This way we can identify the exact common npm libraries and frameworks, and net new additions.
[diff-htmls.zip](https://github.com/user-attachments/files/15764424/diff-htmls.zip)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.