CycloneDX / CycloneDX/cyclonedx-node-npm
DOCS: describe how component de-duplication works
- Dominant language
- JavaScript
- Stars
- 150
- Forks
- 29
- Avg merge
- 1h 3m
- Merged PRs (30d)
- 1
Description
target: a new file "component_deduplication" in https://github.com/CycloneDX/cyclonedx-node-npm/tree/main/docs
related docs:
* https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/docs/component_deduplication.md
goal:
- [ ] describe the need and reasoning
- [ ] have (alternative) processes described, how de-duplication could be achieved. which properties make components identical? `{group,name,version,download-location,hashes,...}`?
- [ ] have a clear decision which process is to be used
-----
:tipping_hand_person: want to discuss? please use https://github.com/CycloneDX/cyclonedx-node-npm/discussions/307
-> there we have threats, votes, and everything we need
Contributor guide
Assessment
This issue has not been assessed yet.