Lack of dependencies in cyclonedx-ruby.gemspec file causing runtime issues if client does not have appropriate dependent gems installed

CycloneDX / cyclonedx-ruby-gem

Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

https://cyclonedx.org/

Apache License 2.0

21 stars 20 forks source link

Closed chris-sansone-angi closed 4 years ago

chris-sansone-angi commented 5 years ago

The cyclonedx-ruby.gemspec file does not have any dependencies defined using s.add_runtime_dependency or s.add_development_dependency. If a user does not have a dependent gem library installed they will get errors.

For example a client that does not have the rest-client gem installed will get the following error when they run cyclonedx-ruby:

kernel_require.rb:54:in `require': cannot load such file -- rest-client (LoadError)

chris-sansone-angi commented 5 years ago

@stevespringett - thanks for merging this. I think you can close this one now. No?