DependencyTrack / DependencyTrack/dependency-track

Require the ability to extract the current and latest version of a package

Open
#1,833 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

Cannot find the equivalent after searching.

We have to create reports on packages showing that the ones that have a problem due to the latest version making the current one 'outdated'.

Using a curl command we can extract a large chunk of the data.

curl -X "GET" -H "X-API-Key:/export" > extract.json

Even just downloading the component BOM if it was in there would do!

### Current Behavior:

Even though you can show the column for latest version in Dependency Track (Under Project > Components) , this extraction does not include it.

### Proposed Behavior:

Please enhance theis or some other form of extraction to include the

Package name
Version
License
Latest version.

(PS Downloading the information as a CSV would be awsome!)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.