moment / luxon

⏱ A library for working with dates and times in JS
https://moment.github.io/luxon
MIT License
15.05k stars 728 forks source link

published package.json causing problems in CycloneDX Webpack Plugin #1543

Open tomsontom opened 7 months ago

tomsontom commented 7 months ago

Describe the bug

When using the CycloneDX Webpack Plugin luxon the luxon dependency is not showing up in the bom because the package.json inside your npm-packages src-fold does not contain a name.

To Reproduce

See https://github.com/CycloneDX/cyclonedx-webpack-plugin/issues/1237 how to reproduce.

Actual vs Expected behavior

See https://github.com/CycloneDX/cyclonedx-webpack-plugin/issues/1237

Desktop (please complete the following information):

Additional context

I'm not sure who is to blame and I could not find a description if it allowed to have a package.json as part of the npm-module as shipped by your project (eg not containing a name-property). I also could not find out what the package.json is used for. If not mistaken the published js-Files do not use it.