CycloneDX / CycloneDX/cyclonedx-node-yarn
feat: support for yarn protocol `jsr:`
- Dominant language
- JavaScript
- Stars
- 26
- Forks
- 11
- Avg merge
- 17m
- Merged PRs (30d)
- 1
Description
## Is your feature request related to a problem? Please describe.
since yarn 4.9.0 they have native support for protocol `jsr`. see https://github.com/yarnpkg/berry/releases/tag/%40yarnpkg/cli/4.9.0
lets add support for it!
## Describe the solution you'd like
JSR packages have the download location have the "correct" (whatever this means) properties:
- download location is on JSR
- PackageURL uses `jsr` for type -- see https://github.com/package-url/purl-spec/issues/457
test bed should be a new one called `jsr-protocol-dependency`!
## Describe alternatives you've considered
/
## Additional context
- [x] see related test bed: https://github.com/CycloneDX/cyclonedx-node-yarn/tree/main/tests/_data/testbeds/alternative-package-registry
- [ ] purl type requested - https://github.com/package-url/purl-spec/issues/457
## Contribution
- [ ] I am willing to provide an implementation
- [x] I will wait until somebody else implements it
Contributor guide
Assessment
This issue has not been assessed yet.