CycloneDX / CycloneDX/cyclonedx-node-yarn

feat: support for yarn protocol `jsr:`

Open
#289 1 comment 0 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
JavaScript
Stars
26
Forks
11
Avg merge
17m
Merged PRs (30d)
1

Description

## Is your feature request related to a problem? Please describe.

since yarn 4.9.0 they have native support for protocol `jsr`. see https://github.com/yarnpkg/berry/releases/tag/%40yarnpkg/cli/4.9.0

lets add support for it!

## Describe the solution you'd like

JSR packages have the download location have the "correct" (whatever this means) properties:
- download location is on JSR
- PackageURL uses `jsr` for type -- see https://github.com/package-url/purl-spec/issues/457

test bed should be a new one called `jsr-protocol-dependency`!

## Describe alternatives you've considered

/

## Additional context

- [x] see related test bed: https://github.com/CycloneDX/cyclonedx-node-yarn/tree/main/tests/_data/testbeds/alternative-package-registry
- [ ] purl type requested - https://github.com/package-url/purl-spec/issues/457

## Contribution

- [ ] I am willing to provide an implementation
- [x] I will wait until somebody else implements it

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.