CycloneDX / CycloneDX/cyclonedx-dotnet
.NET6 Client-Side Libraries Missing from BOM
- Dominant language
- C#
- Stars
- 294
- Forks
- 123
- PR merge metrics
- No merged PRs in 30d
Description
I noticed today that a .NET6 project in Dependency Track was missing Bootstrap and jQuery components. Project is a basic .NET6 webapp generated from CLI with default folder structure.
wwwroot
--css
--js
--lib
----boostrap
------dist
----jquery
------dist
I generated a libman.json file and updated the bootstrap and jquery references for the client side libraries thinking maybe that would get picked up and processed.
```{
"version": "1.0",
"defaultProvider": "cdnjs",
"libraries": [
{
"provider": "cdnjs",
"library": "bootstrap@5.2.1",
"destination": "wwwroot/lib/bootstrap/dist"
},
{
"provider": "cdnjs",
"library": "jquery@3.6.1",
"destination": "wwwroot/lib/jquery/dist"
}
]
}
```
Attempted to recreate the BOM after the references were restored and the same result - missing client-side libraries. Any thoughts, suggestions, advice? TIA
Contributor guide
Research direction
Start by reproducing the issue with the basic .NET6 CLI webapp structure and the provided libman.json, then inspect how dependencies under wwwroot/lib are collected into the BOM. Compare the generated BOM with the Bootstrap and jQuery libraries restored in the project. Done means those client-side libraries are detected and included in the BOM.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- bootstrap, csharp, jquery
- Domain
- frontend, tooling
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100