@cyclonedx/cyclonedx-npm 1.10.0

on Node.js NPM

Added

• SBOM result might have component.scope=optional populated for OptionalDependencies (#645 via #657)

Fixed

• DevDependencies that are also required by OptionalDependencies correctly have the property cdx:npm:package:development populated in SBOM results (#645 via #657)
• DevDependencies that are also required by OptionalDependencies are correctly omitted from SBOM results, when the CLI switch for omitting "dev" and "optional" are set (#645 via #657)

Docs

• Describe internal NPM executable detection in README (via #647)

Build

• Use TypeScript v5.0.4 now, was v4.9.5 (via #638)

Full Changelog: v1.9.2...v1.10.0

New Contributors

• @igord made their first contribution in #647