From ae88605b374a66458d38a1a068f90206b5c95b5f Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Mon, 16 Mar 2026 13:41:04 +0100 Subject: [PATCH 1/4] docs Signed-off-by: Jan Kowalleck --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 29d2f7bd..81220c27 100644 --- a/README.md +++ b/README.md @@ -30,7 +30,7 @@ These systems are out of scope. Therefore, the following tools are not part of t | system | actual tool(s) | |:------:|:---------------| | _Angular_ | Utilize [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#use-with-angular) or [@cyclonedx/webpack-plugin](https://www.npmjs.com/package/%40cyclonedx/webpack-plugin?activeTab=readme#use-with-angular) | -| _Bun_ | Utilize [@cyclonedx/`cyclonedx-esbuild`](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#plugin-example-esbuild) | +| _Bun_ | Utilize [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#plugin-example-esbuild) | | _Bower_ | None. (_Bower_ is [deprecated](https://bower.io/blog/2017/how-to-migrate-away-from-bower/)!) | | _esbuild_ | [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-esbuild) | | _Parcel_ | To be announced, suggestions welcome | From 82d43b7f083c97182a0ed586aafae60fea83ecf8 Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Mon, 16 Mar 2026 13:42:08 +0100 Subject: [PATCH 2/4] docs Signed-off-by: Jan Kowalleck --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 81220c27..d71f781b 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ generate _[CycloneDX][link_website]_ Software-Bill-of-Materials (SBOM) from _nod | ecosystem | actual tool | |:---------:|:------------| | _npm_ | [@cyclonedx/cyclonedx-npm](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-npm) | -| _pnpm_ | To be announced, suggestions welcome.
Candidate: [cyclonedx-node-pnpm](https://github.com/CycloneDX/cyclonedx-node-pnpm) | +| _pnpm_ | To be announced, suggestions welcome.
Candidate: [cyclonedx-node-pnpm](https://github.com/CycloneDX/cyclonedx-node-pnpm) | | _yarn_ | [@cyclonedx/yarn-plugin-cyclonedx](https://www.npmjs.com/package/%40cyclonedx/yarn-plugin-cyclonedx) | *) You should not depend on this very meta-package, instead depend on the actual tool that fits your specific (eco)system. @@ -27,19 +27,19 @@ generate _[CycloneDX][link_website]_ Software-Bill-of-Materials (SBOM) from _nod There are systems, that are not node-targeting, but use node as a runtime/compiler environment, or use node package registry as a distribution system. These systems are out of scope. Therefore, the following tools are not part of this very meta-package. -| system | actual tool(s) | +| System | Actual tool(s) | |:------:|:---------------| | _Angular_ | Utilize [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#use-with-angular) or [@cyclonedx/webpack-plugin](https://www.npmjs.com/package/%40cyclonedx/webpack-plugin?activeTab=readme#use-with-angular) | | _Bun_ | Utilize [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#plugin-example-esbuild) | | _Bower_ | None. (_Bower_ is [deprecated](https://bower.io/blog/2017/how-to-migrate-away-from-bower/)!) | -| _esbuild_ | [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-esbuild) | +| _Esbuild_ | [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-esbuild) | | _Parcel_ | To be announced, suggestions welcome | | _React_ | Utilize [@cyclonedx/webpack-plugin](https://www.npmjs.com/package/%40cyclonedx/webpack-plugin?activeTab=readme#use-with-react) | | _Rollup_ | [rollup-plugin-sbom](https://www.npmjs.com/package/rollup-plugin-sbom) | | _Rspack_/_Rsbuild_ | To be announced, suggestions welcome | | _Svelte_ | To be announced, suggestions welcome | | _Vite_ | Utilize [rollup-plugin-sbom](https://www.npmjs.com/package/rollup-plugin-sbom?activeTab=readme#usage-with-vite) | -| _webpack_ | [@cyclonedx/webpack-plugin](https://www.npmjs.com/package/%40cyclonedx/webpack-plugin) | +| _Webpack_ | [@cyclonedx/webpack-plugin](https://www.npmjs.com/package/%40cyclonedx/webpack-plugin) | ## Library From c4c26378abb5cb41908387672b8768e8b53ae5ae Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Mon, 16 Mar 2026 13:43:31 +0100 Subject: [PATCH 3/4] docs Signed-off-by: Jan Kowalleck --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d71f781b..8bd76261 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ This is a so-called **meta-package**, it does not ship any own functionality, bu This package's dependencies are tools* with one purpose in common: generate _[CycloneDX][link_website]_ Software-Bill-of-Materials (SBOM) from _node_-based projects. -| ecosystem | actual tool | +| Ecosystem | Actual Tool | |:---------:|:------------| | _npm_ | [@cyclonedx/cyclonedx-npm](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-npm) | | _pnpm_ | To be announced, suggestions welcome.
Candidate: [cyclonedx-node-pnpm](https://github.com/CycloneDX/cyclonedx-node-pnpm) | @@ -27,7 +27,7 @@ generate _[CycloneDX][link_website]_ Software-Bill-of-Materials (SBOM) from _nod There are systems, that are not node-targeting, but use node as a runtime/compiler environment, or use node package registry as a distribution system. These systems are out of scope. Therefore, the following tools are not part of this very meta-package. -| System | Actual tool(s) | +| System | Actual Tool(s) | |:------:|:---------------| | _Angular_ | Utilize [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#use-with-angular) or [@cyclonedx/webpack-plugin](https://www.npmjs.com/package/%40cyclonedx/webpack-plugin?activeTab=readme#use-with-angular) | | _Bun_ | Utilize [@cyclonedx/cyclonedx-esbuild](https://www.npmjs.com/package/@cyclonedx/cyclonedx-esbuild?activeTab=readme#plugin-example-esbuild) | From 48f4658262773dab6d564b3ad2b4756f8765373f Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Mon, 16 Mar 2026 13:44:01 +0100 Subject: [PATCH 4/4] docs Signed-off-by: Jan Kowalleck --- CONTRIBUTING.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 584a5fac..9e20c09f 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -11,5 +11,5 @@ Please sign off your commits, to show that you agree to publish your changes und , and to indicate agreement with [Developer Certificate of Origin (DCO)](https://developercertificate.org/). ```shell -git commit --signed-off ... +git commit -s ... ```