@cyclonedx/cdxgen 12.1.1 → 12.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. package/README.md +27 -9
  2. package/bin/cdxgen.js +1 -1
  3. package/data/spdx.schema.json +35 -2
  4. package/data/templates/asvs-5.0.cdx.json +1727 -3471
  5. package/lib/cli/index.js +32 -4
  6. package/lib/evinser/evinser.js +2 -8
  7. package/lib/helpers/display.js +1 -1
  8. package/lib/helpers/envcontext.js +10 -2
  9. package/lib/helpers/utils.js +487 -115
  10. package/lib/helpers/utils.poku.js +200 -3
  11. package/lib/helpers/validator.js +37 -3
  12. package/lib/managers/binary.js +34 -12
  13. package/lib/managers/containerutils.js +68 -0
  14. package/lib/managers/docker.getConnection.poku.js +61 -0
  15. package/lib/managers/docker.js +72 -119
  16. package/lib/parsers/iri.js +1 -2
  17. package/lib/server/server.js +164 -34
  18. package/lib/server/server.poku.js +232 -10
  19. package/lib/stages/postgen/annotator.js +281 -3
  20. package/lib/stages/postgen/postgen.js +4 -7
  21. package/lib/third-party/arborist/lib/diff.js +1 -1
  22. package/lib/third-party/arborist/lib/node.js +1 -1
  23. package/lib/third-party/arborist/lib/yarn-lock.js +1 -1
  24. package/package.json +22 -326
  25. package/types/bin/dependencies.d.ts.map +1 -1
  26. package/types/bin/licenses.d.ts +3 -0
  27. package/types/bin/licenses.d.ts.map +1 -0
  28. package/types/lib/cli/index.d.ts.map +1 -1
  29. package/types/lib/evinser/evinser.d.ts.map +1 -1
  30. package/types/lib/helpers/envcontext.d.ts.map +1 -1
  31. package/types/lib/helpers/utils.d.ts +1 -1
  32. package/types/lib/helpers/utils.d.ts.map +1 -1
  33. package/types/lib/helpers/validator.d.ts.map +1 -1
  34. package/types/lib/managers/binary.d.ts.map +1 -1
  35. package/types/lib/managers/containerutils.d.ts +3 -0
  36. package/types/lib/managers/containerutils.d.ts.map +1 -0
  37. package/types/lib/managers/docker.d.ts +0 -2
  38. package/types/lib/managers/docker.d.ts.map +1 -1
  39. package/types/lib/parsers/iri.d.ts.map +1 -1
  40. package/types/lib/server/server.d.ts +14 -0
  41. package/types/lib/server/server.d.ts.map +1 -1
  42. package/types/lib/stages/postgen/annotator.d.ts.map +1 -1
  43. package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
  44. package/bin/dependencies.js +0 -131
  45. package/lib/helpers/dependencies.poku.js +0 -11
package/README.md CHANGED
@@ -1,3 +1,4 @@
1
+ [![SBOM](https://img.shields.io/badge/SBOM-with_%E2%9D%A4%EF%B8%8F_by_cdxgen-FF753D)](https://github.com/cdxgen/cdxgen)
1
2
  [![JSR][badge-jsr]][jsr-cdxgen]
2
3
  [![NPM][badge-npm]][npmjs-cdxgen]
3
4
  [![GitHub Releases][badge-github-releases]][github-releases]
@@ -50,13 +51,6 @@ Sections include:
50
51
 
51
52
  ## Usage
52
53
 
53
- ## For Contributors / Developers
54
-
55
- ```shell
56
- pnpm install
57
- pnpm dlx cdxgen
58
- ```
59
-
60
54
  ## Installing
61
55
 
62
56
  ```shell
@@ -78,7 +72,7 @@ $ brew install cdxgen
78
72
  If you are a [Winget][winget-homepage] user on windows, you can also install cdxgen via:
79
73
 
80
74
  ```shell
81
- $ winget install cdxgen
75
+ winget install cdxgen
82
76
  ```
83
77
 
84
78
  Deno and bun runtime can be used with limited support.
@@ -540,7 +534,19 @@ const dbody = await submitBom(args, bomNSData.bomJson);
540
534
 
541
535
  ## Contributing
542
536
 
543
- Please check out our [contribute to CycloneDX/cdxgen documentation][github-contribute] if you are interested in helping.
537
+ Please check out our [open issues][github-contribute] if you are interested in helping.
538
+
539
+ ### Codeberg Mirror
540
+
541
+ The project is mirrored on [Codeberg](https://codeberg.org/cdxgen/cdxgen). Users can clone the repository using the following URL:
542
+
543
+ ```shell
544
+ git clone https://codeberg.org/cdxgen/cdxgen.git
545
+ ```
546
+
547
+ The maintainers accept Pull Requests (PRs) against the Codeberg repository.
548
+
549
+ > **Note:** The Codeberg repository is currently synced manually from GitHub.
544
550
 
545
551
  Before raising a PR, please run the following commands.
546
552
 
@@ -588,6 +594,18 @@ Some features are funded through [NGI Zero Core](https://nlnet.nl/core), a fund
588
594
  [<img src="https://nlnet.nl/logo/banner.png" alt="NLnet foundation logo" width="20%" />](https://nlnet.nl)
589
595
  [<img src="https://nlnet.nl/image/logos/NGI0_tag.svg" alt="NGI Zero Logo" width="20%" />](https://nlnet.nl/core)
590
596
 
597
+ cdxgen is an OWASP Foundation production project.
598
+
599
+ [<img src="https://owasp.org/assets/images/logo.png" width="20%" />](https://owasp.org)
600
+
601
+ ## cdxgen badge
602
+
603
+ Copy the below block to your markdown files to show your ❤️ for cdxgen.
604
+
605
+ ```markdown
606
+ [![SBOM](https://img.shields.io/badge/SBOM-with_%E2%9D%A4%EF%B8%8F_by_cdxgen-FF753D)](https://github.com/cdxgen/cdxgen)
607
+ ```
608
+
591
609
  <!-- LINK LABELS -->
592
610
  <!-- Badges -->
593
611
 
package/bin/cdxgen.js CHANGED
@@ -1114,7 +1114,7 @@ const needsBomSigning = ({ generateKeyAndSign }) =>
1114
1114
  protobomModule.writeBinary(bomNSData.bomJson, options.protoBinFile);
1115
1115
  thoughtLog("BOM file is also available in .proto format!");
1116
1116
  }
1117
- if (options.print && bomNSData.bomJson && bomNSData.bomJson.components) {
1117
+ if (options.print && bomNSData.bomJson?.components) {
1118
1118
  printSummary(bomNSData.bomJson);
1119
1119
  if (options.includeFormulation) {
1120
1120
  printFormulation(bomNSData.bomJson);
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "$schema": "http://json-schema.org/draft-07/schema#",
3
3
  "$id": "http://cyclonedx.org/schema/spdx.schema.json",
4
- "$comment": "v1.0-3.27.0",
4
+ "$comment": "v1.0-3.28.0",
5
5
  "type": "string",
6
6
  "enum": [
7
7
  "0BSD",
@@ -14,6 +14,7 @@
14
14
  "Adobe-Glyph",
15
15
  "Adobe-Utopia",
16
16
  "ADSL",
17
+ "Advanced-Cryptics-Dictionary",
17
18
  "AFL-1.1",
18
19
  "AFL-1.2",
19
20
  "AFL-2.0",
@@ -27,6 +28,7 @@
27
28
  "AGPL-3.0-only",
28
29
  "AGPL-3.0-or-later",
29
30
  "Aladdin",
31
+ "ALGLIB-Documentation",
30
32
  "AMD-newlib",
31
33
  "AMDPLPA",
32
34
  "AML",
@@ -68,6 +70,7 @@
68
70
  "BlueOak-1.0.0",
69
71
  "Boehm-GC",
70
72
  "Boehm-GC-without-fee",
73
+ "BOLA-1.1",
71
74
  "Borceux",
72
75
  "Brian-Gladman-2-Clause",
73
76
  "Brian-Gladman-3-Clause",
@@ -94,6 +97,7 @@
94
97
  "BSD-3-Clause-No-Nuclear-Warranty",
95
98
  "BSD-3-Clause-Open-MPI",
96
99
  "BSD-3-Clause-Sun",
100
+ "BSD-3-Clause-Tso",
97
101
  "BSD-4-Clause",
98
102
  "BSD-4-Clause-Shortened",
99
103
  "BSD-4-Clause-UC",
@@ -102,12 +106,14 @@
102
106
  "BSD-Advertising-Acknowledgement",
103
107
  "BSD-Attribution-HPND-disclaimer",
104
108
  "BSD-Inferno-Nettverk",
109
+ "BSD-Mark-Modifications",
105
110
  "BSD-Protection",
106
111
  "BSD-Source-beginning-file",
107
112
  "BSD-Source-Code",
108
113
  "BSD-Systemics",
109
114
  "BSD-Systemics-W3Works",
110
115
  "BSL-1.0",
116
+ "Buddy",
111
117
  "BUSL-1.1",
112
118
  "bzip2-1.0.5",
113
119
  "bzip2-1.0.6",
@@ -116,6 +122,7 @@
116
122
  "CAL-1.0-Combined-Work-Exception",
117
123
  "Caldera",
118
124
  "Caldera-no-preamble",
125
+ "CAPEC-tou",
119
126
  "Catharon",
120
127
  "CATOSL-1.1",
121
128
  "CC-BY-1.0",
@@ -245,6 +252,9 @@
245
252
  "EPL-1.0",
246
253
  "EPL-2.0",
247
254
  "ErlPL-1.1",
255
+ "ESA-PL-permissive-2.4",
256
+ "ESA-PL-strong-copyleft-2.4",
257
+ "ESA-PL-weak-copyleft-2.4",
248
258
  "etalab-2.0",
249
259
  "EUDatagrid",
250
260
  "EUPL-1.0",
@@ -350,11 +360,14 @@
350
360
  "HPND-sell-MIT-disclaimer-xserver",
351
361
  "HPND-sell-regexpr",
352
362
  "HPND-sell-variant",
363
+ "HPND-sell-variant-critical-systems",
353
364
  "HPND-sell-variant-MIT-disclaimer",
354
365
  "HPND-sell-variant-MIT-disclaimer-rev",
366
+ "HPND-SMC",
355
367
  "HPND-UC",
356
368
  "HPND-UC-export-US",
357
369
  "HTMLTIDY",
370
+ "hyphen-bulgarian",
358
371
  "IBM-pibs",
359
372
  "ICU",
360
373
  "IEC-Code-Components-EULA",
@@ -373,6 +386,7 @@
373
386
  "IPL-1.0",
374
387
  "ISC",
375
388
  "ISC-Veillard",
389
+ "ISO-permission",
376
390
  "Jam",
377
391
  "JasPer-2.0",
378
392
  "jove",
@@ -450,10 +464,12 @@
450
464
  "MIT-Khronos-old",
451
465
  "MIT-Modern-Variant",
452
466
  "MIT-open-group",
467
+ "MIT-STK",
453
468
  "MIT-testregex",
454
469
  "MIT-Wu",
455
470
  "MITNFA",
456
471
  "MMIXware",
472
+ "MMPL-1.0.1",
457
473
  "Motosoto",
458
474
  "MPEG-SSG",
459
475
  "mpi-permissive",
@@ -487,6 +503,7 @@
487
503
  "NICTA-1.0",
488
504
  "NIST-PD",
489
505
  "NIST-PD-fallback",
506
+ "NIST-PD-TNT",
490
507
  "NIST-Software",
491
508
  "NLOD-1.0",
492
509
  "NLOD-2.0",
@@ -540,6 +557,7 @@
540
557
  "OLDAP-2.8",
541
558
  "OLFL-1.3",
542
559
  "OML",
560
+ "OpenMDW-1.0",
543
561
  "OpenPBS-2.3",
544
562
  "OpenSSL",
545
563
  "OpenSSL-standalone",
@@ -547,13 +565,16 @@
547
565
  "OPL-1.0",
548
566
  "OPL-UK-3.0",
549
567
  "OPUBL-1.0",
568
+ "OSC-1.0",
550
569
  "OSET-PL-2.1",
551
570
  "OSL-1.0",
552
571
  "OSL-1.1",
553
572
  "OSL-2.0",
554
573
  "OSL-2.1",
555
574
  "OSL-3.0",
575
+ "OSSP",
556
576
  "PADL",
577
+ "ParaType-Free-Font-1.3",
557
578
  "Parity-6.0.0",
558
579
  "Parity-7.0.0",
559
580
  "PDDL-1.0",
@@ -598,6 +619,7 @@
598
619
  "SGI-B-1.1",
599
620
  "SGI-B-2.0",
600
621
  "SGI-OpenGL",
622
+ "SGMLUG-PM",
601
623
  "SGP4",
602
624
  "SHL-0.5",
603
625
  "SHL-0.51",
@@ -635,6 +657,7 @@
635
657
  "TAPR-OHL-1.0",
636
658
  "TCL",
637
659
  "TCP-wrappers",
660
+ "TekHVC",
638
661
  "TermReadKey",
639
662
  "TGPPL-1.0",
640
663
  "ThirdEye",
@@ -662,9 +685,11 @@
662
685
  "Unlicense",
663
686
  "Unlicense-libtelnet",
664
687
  "Unlicense-libwhirlpool",
688
+ "UnRAR",
665
689
  "UPL-1.0",
666
690
  "URT-RLE",
667
691
  "Vim",
692
+ "Vixie-Cron",
668
693
  "VOSTROM",
669
694
  "VSL-1.0",
670
695
  "W3C",
@@ -673,12 +698,15 @@
673
698
  "w3m",
674
699
  "Watcom-1.0",
675
700
  "Widget-Workshop",
701
+ "WordNet",
676
702
  "Wsuipa",
703
+ "WTFNMFPL",
677
704
  "WTFPL",
678
705
  "wwl",
679
706
  "wxWindows",
680
707
  "X11",
681
708
  "X11-distribute-modifications-variant",
709
+ "X11-no-permit-persons",
682
710
  "X11-swapped",
683
711
  "Xdebug-1.03",
684
712
  "Xerox",
@@ -716,6 +744,7 @@
716
744
  "Bootloader-exception",
717
745
  "CGAL-linking-exception",
718
746
  "Classpath-exception-2.0",
747
+ "Classpath-exception-2.0-short",
719
748
  "CLISP-exception-2.0",
720
749
  "cryptsetup-OpenSSL-exception",
721
750
  "Digia-Qt-LGPL-exception-1.1",
@@ -746,6 +775,7 @@
746
775
  "i2p-gpl-java-exception",
747
776
  "Independent-modules-exception",
748
777
  "KiCad-libraries-exception",
778
+ "kvirc-openssl-exception",
749
779
  "LGPL-3.0-linking-exception",
750
780
  "libpri-OpenH323-exception",
751
781
  "Libtool-exception",
@@ -769,9 +799,12 @@
769
799
  "Qwt-exception-1.0",
770
800
  "romic-exception",
771
801
  "RRDtool-FLOSS-exception-2.0",
802
+ "rsync-linking-exception",
772
803
  "SANE-exception",
773
804
  "SHL-2.0",
774
805
  "SHL-2.1",
806
+ "Simple-Library-Usage-exception",
807
+ "sqlitestudio-OpenSSL-exception",
775
808
  "stunnel-exception",
776
809
  "SWI-exception",
777
810
  "Swift-exception",
@@ -783,4 +816,4 @@
783
816
  "WxWindows-exception-3.1",
784
817
  "x11vnc-openssl-exception"
785
818
  ]
786
- }
819
+ }