Skip to content

Conversation

youhaveme9
Copy link
Contributor

Enhanced pnpm lock file parsing to automatically collect package metadata (description, author, license) from local node_modules directories, eliminating the need for the FETCH_LICENSE environment variable workaround.

Closes #1981

Signed-off-by: Roshan Kumar <roshaen09@gmail.com>
…ions

Signed-off-by: Roshan Kumar <roshaen09@gmail.com>
@youhaveme9 youhaveme9 requested a review from prabhu as a code owner August 7, 2025 08:22
@prabhu
Copy link
Collaborator

prabhu commented Aug 7, 2025

My Hero!

Copy link
Collaborator

@prabhu prabhu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Brilliant work!

@prabhu
Copy link
Collaborator

prabhu commented Aug 7, 2025

@youhaveme9 could you rebase and regenerate the types to resolve the conflicts?

Signed-off-by: Roshan Kumar <roshaen09@gmail.com>
@youhaveme9
Copy link
Contributor Author

@prabhu Rebased

Signed-off-by: Roshan Kumar <roshaen09@gmail.com>
@youhaveme9
Copy link
Contributor Author

@prabhu
I have also added nix flake support to docs

@prabhu
Copy link
Collaborator

prabhu commented Aug 7, 2025

@youhaveme9 good point about the docs. Could you also add it to the project types one? https://github.com/CycloneDX/cdxgen/blob/master/docs/PROJECT_TYPES.md

Signed-off-by: Roshan Kumar <roshaen09@gmail.com>
@youhaveme9
Copy link
Contributor Author

@prabhu
Added to PROJECT_TYPES.md

@prabhu prabhu merged commit 5805cf1 into CycloneDX:master Aug 7, 2025
79 of 80 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[pnpm] Improve metadata collection with node_modules parsing
2 participants