search

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
https://retirejs.github.io/retire.js/
Other
3.66k stars 414 forks source link

cycloneDXJSON "" components #402

Closed jhodgkinson-splunk closed 1 year ago

jhodgkinson-splunk commented 1 year ago

Retire.js version: (retire --version):

retire --version
3.2.3

node version: (node --version):

node --version
v19.1.0

Description:

After #397, when running it across a directory, duplicate components were replaced with just a [""] in the list.

Expected behaviour:

Not including blank entries.

I've got a change here which fixes it: https://github.com/jhodgkinson-splunk/retire.js/commit/88c4b49af1ee5899ea2d858aa14f80efc3195ca2

Command line for repro: retire --jspath . --js --outputformat cyclonedxJSON

eoftedal commented 1 year ago

Fixed in 3.2.4