CycloneDX / CycloneDX/cyclonedx-dotnet

.NET6 Client-Side Libraries Missing from BOM

Open
#588 10 comments 2 reactions 0 assignees View on GitHub
stale
Dominant language
C#
Stars
294
Forks
123
PR merge metrics
No merged PRs in 30d

Description

I noticed today that a .NET6 project in Dependency Track was missing Bootstrap and jQuery components. Project is a basic .NET6 webapp generated from CLI with default folder structure.

wwwroot
--css
--js
--lib
----boostrap
------dist
----jquery
------dist

I generated a libman.json file and updated the bootstrap and jquery references for the client side libraries thinking maybe that would get picked up and processed.

```{
"version": "1.0",
"defaultProvider": "cdnjs",
"libraries": [
{
"provider": "cdnjs",
"library": "bootstrap@5.2.1",
"destination": "wwwroot/lib/bootstrap/dist"
},
{
"provider": "cdnjs",
"library": "jquery@3.6.1",
"destination": "wwwroot/lib/jquery/dist"
}
]
}
```

Attempted to recreate the BOM after the references were restored and the same result - missing client-side libraries. Any thoughts, suggestions, advice? TIA

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the issue with the basic .NET6 CLI webapp structure and the provided libman.json, then inspect how dependencies under wwwroot/lib are collected into the BOM. Compare the generated BOM with the Bootstrap and jQuery libraries restored in the project. Done means those client-side libraries are detected and included in the BOM.

Written by the indexing model from the issue text.

Assessment

Tech stack
bootstrap, csharp, jquery
Domain
frontend, tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.