CycloneDX / CycloneDX/cyclonedx-python-lib
Improvement: Apply Regex check to `Component.cpe`
Open
enhancement
question
- Dominant language
- Python
- Stars
- 116
- Forks
- 67
- Avg merge
- 8d 2h
- Merged PRs (30d)
- 2
Description
The CycloneDX scpecification defines a Regex for `Component.cpe`, but this library does not enforce this.
see https://github.com/CycloneDX/specification/blob/c320fc0f0b46873864927d9d5684eea7ba439728/schema/bom-1.5.xsd#L1110-L1112
Contributor guide
Research direction
Start at the Component.cpe entry point and compare its requirements with the linked CycloneDX schema regex. Done means CPE values are checked against that regex, with focused coverage for valid and invalid values.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- backend-api-design
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100