CycloneDX / CycloneDX/specification
BC: Removing `incomplete_` prefix in compositions.aggregate
Open
breaking-changes
CDX 1.3
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
https://cyclonedx.org/docs/1.5/json/#compositions_items_aggregate
We currently have `incomplete_` prefix on values. This sounds negative and could confuse the consumers that the list is incomplete.
For example, the vendor might have provided a complete and accurate first-party-only or third-party-only SBOM as per the compliance requirements.
It will be nice to accept values without the `incomplete_` prefix.
Contributor guide
Assessment
This issue has not been assessed yet.