CycloneDX / CycloneDX/cyclonedx-python
feat: improve PDM reports reading lock and only report production dependencies
Open
enhancement
help wanted
source: pdm
- Dominant language
- Python
- Stars
- 390
- Forks
- 98
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 1
Description
## Describe the solution you'd like
I am considering migrating my poetry projects to pdm to comply with PEP 518 and PEP 631 and be faster (that's what the benchmarks I have seen say).
One obstacle is the way to generate the SBOM, since with poetry it reads the lock and only reports the production dependencies. This does not happen with PDM since its only support is reading a venv.
Contributor guide
Assessment
This issue has not been assessed yet.