CycloneDX / CycloneDX/cyclonedx-webpack-plugin
feat: have "formulation" as part of the BOM - MBOM
- Dominant language
- TypeScript
- Stars
- 30
- Forks
- 11
- Avg merge
- 16m
- Merged PRs (30d)
- 1
Description
## Is your feature request related to a problem? Please describe.
CycloneDX 1.5 supports formulation: https://cyclonedx.org/guides/sbom/formulation
This could be used to document how webpack was configured and how it compiled/packed the results.
## Describe the solution you'd like
* if target is spec 1.5, then the result should contain information how webpack built the result.
* the details are to be discussed here:
* add Manufacturing Bill of Materials (MBOM) to the capabilities/keywords
* ... to be continued & discussed
## Describe alternatives you've considered
--
## Additional context
need to POC/investigate what information can be gathered from webpack, and if the information qualifies for "CDX formulation"
Contributor guide
Assessment
This issue has not been assessed yet.