@cyclonedx/cdxgen 8.0.4 → 8.0.5

package/README.md

@@ -78,7 +78,7 @@ sudo npm install -g @cyclonedx/cdxgen
 You can also use the cdxgen container image
 
 ```bash
-docker run --rm -it -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen -r /app -o /app/bom.json
+docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen -r /app -o /app/bom.json
 ```
 
 ## Getting Help
@@ -163,7 +163,7 @@ cdxgen --server
 Or use the container image.
 
 ```bash
-docker run --rm -it -v /tmp:/tmp -p 9090:9090 -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen -r /app --server
+docker run --rm -v /tmp:/tmp -p 9090:9090 -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen -r /app --server
 ```
 
 Use curl or your favourite tool to pass arguments to the `/sbom` route.
@@ -348,10 +348,14 @@ Use the [CycloneDX CLI](https://github.com/CycloneDX/cyclonedx-cli) tool for adv
 Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE](LICENSE) file for the full license.
 
 [license]: https://github.com/cyclonedx/cdxgen/blob/master/LICENSE
+[cyclonedx-homepage]: https://cyclonedx.org
 
-## Discord support
-
-The developers could be reached via the [discord](https://discord.gg/DCNxzaeUpd) channel.
+## Contributing
 
+Follow the usual PR process but prior to raising a PR run the following commands.
 
-[cyclonedx-homepage]: https://cyclonedx.org
+```bash
+npm run lint
+npm run pretty
+npm test
+```

package/bin/cdxgen

@@ -155,7 +155,10 @@ let options = {
   }
   const bomNSData = (await bom.createBom(filePath, options)) || {};
 
-  if (args.output) {
+  if (
+    args.output &&
+    (typeof args.output === "string" || args.output instanceof String)
+  ) {
     if (bomNSData.bomXmlFiles) {
       console.log("BOM files produced:", bomNSData.bomXmlFiles);
     } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen",
-  "version": "8.0.4",
+  "version": "8.0.5",
   "description": "Creates CycloneDX Software Bill-of-Materials (SBOM) from source or container image",
   "homepage": "http://github.com/cyclonedx/cdxgen",
   "author": "Prabhu Subramanian <prabhu@appthreat.com>",

package/utils.js

@@ -485,7 +485,7 @@ const yarnLockToIdentMap = function (lockData) {
             if (group) {
               group = `${group}/`;
             }
-            if (range.startsWith("npm:")) {
+            if (range && range.startsWith("npm:")) {
               range = range.replace("npm:", "");
             }
             currentIdents.push(`${group || ""}${name}@${range}`);