Replies: 2 comments 1 reply
-
|
FOr the dependnecies spec see - Please read the docs: If this as not a question but a bug report: |
Beta Was this translation helpful? Give feedback.
-
|
Thanks. Before I consider this a bug, I need to make sure what I understand is correct. I also tried cyclonedx-node-npm and found bugs. I know the tool is under development, and I will report bugs under cyclonedx-node-npm. Thanks for the useful tools, which help me a lot! |
Beta Was this translation helpful? Give feedback.
-
|
this conversation got closed due to #321 |
Beta Was this translation helpful? Give feedback.
-
Hi,
I noticed that in bom.json, the last element in the property "dependencies" looked like the direct dependencies for the given package.
However, when I generated bom.json for yeoman-generator, there are 94 items in the array "dependsOn". But depending on the package.json in yeoman-generator, there are only 13 direct dependencies. I wonder how it happens and what exactly are the items in "dependsOn" in the last element of "dependencies".
{ "ref": "pkg:npm/[email protected]", "dependsOn": [ "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/%40tootallnate/[email protected]", "pkg:npm/%40gar/[email protected]", "pkg:npm/%40isaacs/[email protected]", "pkg:npm/%40nodelib/[email protected]", "pkg:npm/%40nodelib/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/%40types/[email protected]", "pkg:npm/%40types/[email protected]", "pkg:npm/%40types/[email protected]", "pkg:npm/%40types/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]", "pkg:npm/%40npmcli/[email protected]", "pkg:npm/[email protected]", "pkg:npm/[email protected]" ] }Beta Was this translation helpful? Give feedback.
All reactions