CycloneDX / CycloneDX/specification

BC: Removing `incomplete_` prefix in compositions.aggregate

Open
#319 1 comment 0 reactions 0 assignees View on GitHub
breaking-changes CDX 1.3
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

https://cyclonedx.org/docs/1.5/json/#compositions_items_aggregate

We currently have `incomplete_` prefix on values. This sounds negative and could confuse the consumers that the list is incomplete.

For example, the vendor might have provided a complete and accurate first-party-only or third-party-only SBOM as per the compliance requirements.

It will be nice to accept values without the `incomplete_` prefix.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.