@cyclonedx/cyclonedx-library 6.3.2 → 6.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cyclonedx-library",
-  "version": "6.3.2",
+  "version": "6.4.0",
   "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
   "license": "Apache-2.0",
   "keywords": [

package/src/models/metadata.ts

@@ -18,9 +18,11 @@ Copyright (c) OWASP Foundation. All Rights Reserved.
 */
 
 import type { Component } from './component'
+import { LicenseRepository } from './license'
 import { LifecycleRepository } from './lifecycle'
 import { OrganizationalContactRepository } from './organizationalContact'
 import type { OrganizationalEntity } from './organizationalEntity'
+import { PropertyRepository } from './property'
 import { ToolRepository } from './tool'
 
 export interface OptionalMetadataProperties {
@@ -31,6 +33,8 @@ export interface OptionalMetadataProperties {
   component?: Metadata['component']
   manufacture?: Metadata['manufacture']
   supplier?: Metadata['supplier']
+  licenses?: Metadata['licenses']
+  properties?: Metadata['properties']
 }
 
 export class Metadata {
@@ -41,6 +45,8 @@ export class Metadata {
   component?: Component
   manufacture?: OrganizationalEntity
   supplier?: OrganizationalEntity
+  licenses: LicenseRepository
+  properties: PropertyRepository
 
   constructor (op: OptionalMetadataProperties = {}) {
     this.timestamp = op.timestamp
@@ -50,5 +56,7 @@ export class Metadata {
     this.component = op.component
     this.manufacture = op.manufacture
     this.supplier = op.supplier
+    this.licenses = op.licenses ?? new LicenseRepository()
+    this.properties = op.properties ?? new PropertyRepository()
   }
 }

package/src/serialize/json/normalize.ts

@@ -223,7 +223,13 @@ export class MetadataNormalizer extends BaseJsonNormalizer<Models.Metadata> {
         : orgEntityNormalizer.normalize(data.manufacture, options),
       supplier: data.supplier === undefined
         ? undefined
-        : orgEntityNormalizer.normalize(data.supplier, options)
+        : orgEntityNormalizer.normalize(data.supplier, options),
+      licenses: this._factory.spec.supportsMetadataLicenses && data.licenses.size > 0
+        ? this._factory.makeForLicense().normalizeIterable(data.licenses, options)
+        : undefined,
+      properties: this._factory.spec.supportsMetadataProperties && data.properties.size > 0
+        ? this._factory.makeForProperty().normalizeIterable(data.properties, options)
+        : undefined
     }
   }
 }

package/src/serialize/json/types.ts

@@ -94,6 +94,7 @@ export namespace Normalized {
     manufacture?: OrganizationalEntity
     supplier?: OrganizationalEntity
     licenses?: License[]
+    properties?: Property[]
   }
 
   export interface LifecyclePhase {

package/src/serialize/xml/normalize.ts

@@ -246,6 +246,20 @@ export class MetadataNormalizer extends BaseXmlNormalizer<Models.Metadata> {
           children: this._factory.makeForOrganizationalContact().normalizeIterable(data.authors, options, 'author')
         }
       : undefined
+    const licenses: SimpleXml.Element | undefined = this._factory.spec.supportsMetadataLicenses && data.licenses.size > 0
+      ? {
+          type: 'element',
+          name: 'licenses',
+          children: this._factory.makeForLicense().normalizeIterable(data.licenses, options)
+        }
+      : undefined
+    const properties: SimpleXml.Element | undefined = this._factory.spec.supportsMetadataProperties && data.properties.size > 0
+      ? {
+          type: 'element',
+          name: 'properties',
+          children: this._factory.makeForProperty().normalizeIterable(data.properties, options, 'property')
+        }
+      : undefined
     return {
       type: 'element',
       name: elementName,
@@ -262,7 +276,9 @@ export class MetadataNormalizer extends BaseXmlNormalizer<Models.Metadata> {
           : orgEntityNormalizer.normalize(data.manufacture, options, 'manufacture'),
         data.supplier === undefined
           ? undefined
-          : orgEntityNormalizer.normalize(data.supplier, options, 'supplier')
+          : orgEntityNormalizer.normalize(data.supplier, options, 'supplier'),
+        licenses,
+        properties
       ].filter(isNotUndefined)
     }
   }

package/src/spec/_protocol.ts

@@ -43,6 +43,8 @@ export interface _SpecProtocol {
   supportsVulnerabilityRatingMethod: (rm: Vulnerability.RatingMethod | any) => boolean
   supportsComponentEvidence: boolean
   supportsMetadataLifecycles: boolean
+  supportsMetadataLicenses: boolean
+  supportsMetadataProperties: boolean
   supportsExternalReferenceHashes: boolean
 }
 
@@ -68,6 +70,8 @@ export class _Spec implements _SpecProtocol {
   readonly #supportsVulnerabilities: boolean
   readonly #supportsComponentEvidence: boolean
   readonly #supportsMetadataLifecycles: boolean
+  readonly #supportsMetadataLicenses: boolean
+  readonly #supportsMetadataProperties: boolean
   readonly #supportsExternalReferenceHashes: boolean
 
   constructor (
@@ -85,6 +89,8 @@ export class _Spec implements _SpecProtocol {
     vulnerabilityRatingMethods: Iterable<Vulnerability.RatingMethod>,
     supportsComponentEvidence: boolean,
     supportsMetadataLifecycles: boolean,
+    supportsMetadataLicenses: boolean,
+    supportsMetadataProperties: boolean,
     supportsExternalReferenceHashes: boolean
   ) {
     this.#version = version
@@ -101,6 +107,8 @@ export class _Spec implements _SpecProtocol {
     this.#vulnerabilityRatingMethods = new Set(vulnerabilityRatingMethods)
     this.#supportsComponentEvidence = supportsComponentEvidence
     this.#supportsMetadataLifecycles = supportsMetadataLifecycles
+    this.#supportsMetadataLicenses = supportsMetadataLicenses
+    this.#supportsMetadataProperties = supportsMetadataProperties
     this.#supportsExternalReferenceHashes = supportsExternalReferenceHashes
   }
 
@@ -167,6 +175,14 @@ export class _Spec implements _SpecProtocol {
     return this.#supportsMetadataLifecycles
   }
 
+  get supportsMetadataLicenses (): boolean {
+    return this.#supportsMetadataLicenses
+  }
+
+  get supportsMetadataProperties (): boolean {
+    return this.#supportsMetadataProperties
+  }
+
   get supportsExternalReferenceHashes (): boolean {
     return this.#supportsExternalReferenceHashes
   }

package/src/spec/consts.ts

@@ -79,6 +79,8 @@ export const Spec1dot2: Readonly<_SpecProtocol> = Object.freeze(new _Spec(
   [],
   false,
   false,
+  false,
+  false,
   false
 ))
 
@@ -139,6 +141,8 @@ export const Spec1dot3: Readonly<_SpecProtocol> = Object.freeze(new _Spec(
   [],
   true,
   false,
+  true,
+  true,
   true
 ))
 
@@ -206,6 +210,8 @@ export const Spec1dot4: Readonly<_SpecProtocol> = Object.freeze(new _Spec(
   ],
   true,
   false,
+  true,
+  true,
   true
 ))
 
@@ -302,6 +308,8 @@ export const Spec1dot5: Readonly<_SpecProtocol> = Object.freeze(new _Spec(
   ],
   true,
   true,
+  true,
+  true,
   true
 ))