1.10.0

Added

• SBOM result might have component.scope=optional populated for OptionalDependencies (#645 via #657)

Fixed

• DevDependencies that are also required by OptionalDependencies correctly have the property cdx:npm:package:development populated in SBOM results (#645 via #657)
• DevDependencies that are also required by OptionalDependencies are correctly omitted from SBOM results, when the CLI switch for omitting "dev" and "optional" are set (#645 via #657)

Docs

• Describe internal NPM executable detection in README (via #647)

Build

• Use TypeScript v5.0.4 now, was v4.9.5 (via #638)

---

Full Changelog: v1.9.2...v1.10.0

---

New Contributors

• @igord made their first contribution in #647

1.9.2

Fixed

• No longer omit components' version's buildID (#551 via #597)
  Fixed for NPM>=7 only. NPM6 omits this information in the first place, still.

Misc

• Utilize SerialNumber generator from @cyclonedx/cyclonedx-library@^1.13 (via #599)
  The previously used internal code was donated to that library.

---

Full Changelog: v1.9.1...v1.9.2

1.9.1

Docs

• added section "How it works" to the README (via #563)

---

Full Changelog: v1.9.0...v1.9.1

1.9.0

Changed

• Detected node packages' metadata are now normalized, before translation to SBOM components happens. (#536 via #537)
  This might increase the quality of SBOM results.

---

Full Changelog: v1.8.0...v1.9.0

1.8.0

Added

• SBOM result might have additional items in metadata.tools populated (#505 via #506)

---

Full Changelog: v1.7.5...v1.8.0

1.7.5

Maintenance release

---

Full Changelog: v1.7.4...v1.7.5

1.7.4

Maintenance release

---

Full Changelog: v1.7.3...v1.7.4

1.8.0-alpha.5d82149ae21396f6824c94185281b9162e2a1841

preview of #503

1.7.3

Maintenance release

Dependencies

• Utilize commander ^10.0.0 now, was "^9.4.0 (via #431)

Build

• Use TypeScript v4.9.5 now, was v4.9.4 (via #482)

---

Full Changelog: v1.7.2...v1.7.3

1.7.2

Changed

• Enhanced randomness when generating a serialNumber (via #389)

Build

• Use TypeScript v4.9.4 now, was v4.9.3 (via #366)

---

Full Changelog: v1.7.1...v1.7.2