Can I use your tool to check a dependency a runtime dependency or a dev dependency? #426
-
Is your feature request related to a problem? Please describe.Hi, I'd like to know if a dependency is a runtime dependency or a dev dependency. |
Beta Was this translation helpful? Give feedback.
Answered by
jkowalleck
Jan 9, 2023
Replies: 1 comment
-
|
The needed feature is already implemented via cdx:npm Namespace Taxonomy Here is an example result: https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/demo/dev-dependencies/example-results/bare/bom.1.4.xml |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
jkowalleck
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The needed feature is already implemented via cdx:npm Namespace Taxonomy
Here is an example result: https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/demo/dev-dependencies/example-results/bare/bom.1.4.xml
You will see the property
cdx:npm:package:developmentset totrue.