CycloneDX / CycloneDX/cyclonedx-maven-plugin

Evaluate makePackageBom for possible removal

Open
#237 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
385
Forks
107
Avg merge
17h 31m
Merged PRs (30d)
7

Description

@prabhu You originally contributed the code for the `makePackageBom` goal. I believe this functionality has since been implemented in `makeAggregateBom`. Can we remove makePackageBom? If not, what specific value does it currently have over makeBom and makeAggregateBom.

If makePackageBom does something the other two goals do not, then how can we simply the plugin to move the functionality into one of the other goals?

Contributor guide

Open the contributing guide

Research direction

Start by comparing the makePackageBom, makeBom, and makeAggregateBom goals referenced in the issue. Trace what each goal currently provides and whether their outputs or use cases differ. Done means deciding whether makePackageBom has distinct value and, if not, defining a justified consolidation or removal plan.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.