sbom 2.1.0 copy "sbom: ^2.1.0" to clipboard
sbom: ^2.1.0 copied to clipboard

A Software Bill of Materials generator specifically for Dart packages.

sbom #

Build Status

A Software Bill Of Materials(SBOM) generator for Dart packages.

This package will generate an SBOM specifically for a Dart package.

The SBOM is generated from the Dart files contained in the package plus the pubspec.yaml, no other files included in the package are currently considered.

Generation is controlled by a configuration file named sbom.yaml which must be present in the top level directory of the package. This file allows setting of the SBOM format, generation directives and field overrides. Generation is effectively a merge of any field ovverides in this file and data generated from the package environment and its pubspec file. It is also assumed that the package either is or will be uploaded to pub for the purposes of download links, homepage information etc.

Please read the example.md for usage information.

Currently, only the Software Package Data Exchange(SPDX) format is supported at specification version 2.2, see here for further details. More detailed information of the specific implementation of this specification in this package can be found in the SPDX readme document

Support for other SBOM format types such as CycloneDX and SWID will be aded in future releases.

6
likes
150
pub points
60%
popularity
screenshot

Publisher

verified publisherdarticulate.com

A Software Bill of Materials generator specifically for Dart packages.

Repository (GitHub)
View/report issues

Topics

#sbom #spdx

Documentation

API reference

Funding

Consider supporting this project:

www.darticulate.com

License

MIT (license)

Dependencies

args, crypto, meta, path, yaml

More

Packages that depend on sbom