CycloneDX / CycloneDX/specification
Support for externalReferences.type source-archive
Open
proposed core enhancement
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
Proposing to add a new URL type called `source-archive` to list the alternative permalinks for archives. This is particular useful when a VCS source gets removed without de-listing the packages. Example: caxa source code were [removed](https://github.com/leafac/caxa) from GitHub, while the packages continue to be available on npm.
Below is an example permalink for the cdxgen repo on Software Heritage.
https://archive.softwareheritage.org/swh:1:rev:068063aad71099eef383e0aeb35e88c001793906
Contributor guide
Assessment
This issue has not been assessed yet.