CycloneDX / CycloneDX/cyclonedx-python
feat: populate `component.authors`
- Dominant language
- Python
- Stars
- 390
- Forks
- 98
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 2
Description
Relating to the ([upcoming](https://github.com/CycloneDX/cyclonedx-python/pull/605)) 4.0.0 release:
The author field is currently missing in the resulting SBOM but could be populated from the `project.authors` field in `pyproject.toml` (although pyproject allows multiple authors).
See:
* https://cyclonedx.org/docs/1.5/json/#metadata_component_author
* https://packaging.python.org/en/latest/specifications/pyproject-toml/#authors-maintainers
Contributor guide
Research direction
Start by reviewing the project.authors definition in pyproject.toml, the generated component.authors field, and the linked pull request #1096. Confirm how multiple authors should map to the CycloneDX component author field, then verify that the resulting SBOM contains the expected author information.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- devtools
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100