CycloneDX / CycloneDX/cyclonedx-python
feat: populate component's `tags`
Open
enhancement
good first issue
hacktoberfest
help wanted
schema 1.6
- Dominant language
- Python
- Stars
- 390
- Forks
- 98
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 2
Description
## background
CycloneDX supports "tags" -
Python knows these as
- `env` - "keywords". see
- `poetry` - "keywords" . see
lock file - To be clarified
- `pipenv` - To be clarified
- `pyproject.toml`/PEP621 - "keywords". see
## request
fill `components[].tags` based on respecive sources
Contributor guide
Research direction
Start by reviewing the metadata sources listed in the issue and the current open pull request #991. Determine how env, Poetry, pipenv, and pyproject.toml/PEP 621 keywords should map to components[].tags, including the unresolved lock-file and pipenv cases. Done means the respective sources populate tags consistently.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100