CycloneDX / CycloneDX/cyclonedx-python
feat: populate `component.authors`
- 主要语言
- Python
- 星标
- 390
- 派生
- 98
- 平均合并
- 2 天 23 小时
- 30 天内合并 PR
- 2
描述
Relating to the ([upcoming](https://github.com/CycloneDX/cyclonedx-python/pull/605)) 4.0.0 release:
The author field is currently missing in the resulting SBOM but could be populated from the `project.authors` field in `pyproject.toml` (although pyproject allows multiple authors).
See:
* https://cyclonedx.org/docs/1.5/json/#metadata_component_author
* https://packaging.python.org/en/latest/specifications/pyproject-toml/#authors-maintainers
贡献指南
调研方向
Start by reviewing the project.authors definition in pyproject.toml, the generated component.authors field, and the linked pull request #1096. Confirm how multiple authors should map to the CycloneDX component author field, then verify that the resulting SBOM contains the expected author information.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- python
- 领域
- devtools
- Issue 类型
- 功能
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 25/100