CycloneDX / cyclonedx-python

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
https://cyclonedx.org
Apache License 2.0
257 stars 67 forks source link

extend project URLs -> external references #800

Open jkowalleck opened 2 months ago

jkowalleck commented 2 months ago

Is your feature request related to a problem? Please describe.

This tool detects project URLs and emits them in the SBOM results as "external references". The URL types are detected based on patterns - see https://github.com/CycloneDX/cyclonedx-python/blob/721f12d1a5799e9766fd4da79f54fd11c5776824/cyclonedx_py/_internal/utils/cdx.py#L85-L104

it appears that PyPI also documented the way they detect URL types: https://docs.pypi.org/project_metadata/#icons

It would be great if the PyPI heuristics could be applied, too.

Describe the solution you'd like

Have the heuristics from PyPI apply to URL type detections, so that emitted external references follow the de facto standards, too.

These heuristics work on the URL name, as well on the URL itself.

Additional context

PyPI's type classification according to https://docs.pypi.org/project_metadata/#icons