DependencyTrack / DependencyTrack/dependency-track
Require the ability to extract the current and latest version of a package
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Cannot find the equivalent after searching.
We have to create reports on packages showing that the ones that have a problem due to the latest version making the current one 'outdated'.
Using a curl command we can extract a large chunk of the data.
curl -X "GET" -H "X-API-Key:/export" > extract.json
Even just downloading the component BOM if it was in there would do!
### Current Behavior:
Even though you can show the column for latest version in Dependency Track (Under Project > Components) , this extraction does not include it.
### Proposed Behavior:
Please enhance theis or some other form of extraction to include the
Package name
Version
License
Latest version.
(PS Downloading the information as a CSV would be awsome!)
Contributor guide
Assessment
This issue has not been assessed yet.