CycloneDX / CycloneDX/cyclonedx-maven-plugin
Creating BOM using cyclonedx for a project which uses OSGified a third party library
Open
enhancement
- Dominant language
- Java
- Stars
- 385
- Forks
- 107
- Avg merge
- 17h 31m
- Merged PRs (30d)
- 7
Description
Please ensure whether cyclonedx generates accurate package URL for OSGIfied a third party library
Contributor guide
Research direction
Start by reproducing the CycloneDX Maven plugin behavior with a project that uses an OSGiified third-party library, then inspect the generated BOM's package URL. Done means determining whether the purl is accurate and documenting the observed result or the required correction.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100