CycloneDX / CycloneDX/cyclonedx-maven-plugin

Creating BOM using cyclonedx for a project which uses OSGified a third party library

Open
#7 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
385
Forks
107
Avg merge
17h 31m
Merged PRs (30d)
7

Description

Please ensure whether cyclonedx generates accurate package URL for OSGIfied a third party library

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the CycloneDX Maven plugin behavior with a project that uses an OSGiified third-party library, then inspect the generated BOM's package URL. Done means determining whether the purl is accurate and documenting the observed result or the required correction.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.