1.7.3

Maintenance release

Dependencies

• Utilize commander ^10.0.0 now, was "^9.4.0 (via #431)

Build

• Use TypeScript v4.9.5 now, was v4.9.4 (via #482)

---

Full Changelog: v1.7.2...v1.7.3

1.7.2

Changed

• Enhanced randomness when generating a serialNumber (via #389)

Build

• Use TypeScript v4.9.4 now, was v4.9.3 (via #366)

---

Full Changelog: v1.7.1...v1.7.2

1.7.1

Maintenance release

Docs

• fix CI/CT shield (badges/shields#8671 via #378)

---

Full Changelog: v1.7.0...v1.7.1

1.7.0

Added

• SBOM result might have serialNumber populated (#375 via #376, #377)

---

Full Changelog: v1.6.1...v1.7.0

1.6.1

Maintenance release

Docs

• Enhanced documentation regarding NodeJS/NPM internals, package-dedupe and results (via #331)

Misc

• Added test for flattened results (via #312)

Build

• Use TypeScript v4.9.3 now, was v4.8.4 (via #333)

---

Full Changelog: v1.6.0...v1.6.1

1.6.0

Added

• When CLI option --flatten-components=true is set, then the property cdx:npm:package:bundled might be added (#311 via #310)

Misc

• Added demos for flattened results (via #310)

---

Full Changelog: v1.5.0...v1.6.0

1.5.0

Added

• Components' install path/location will be visible in the SBOM result (#305 via #308)

---

Full Changelog: v1.4.1...v1.5.0

1.4.1

Fixed

• Components' "sha512" hash is properly detected and populated in the SBOM result. (#302 via #303)

---

Full Changelog: v1.4.0...v1.4.1

1.4.0

Added

• Enabled support for NPM v9. (#245 via #246)

---

Full Changelog: v1.3.0...v1.4.0

1.3.0

Fixed

• Improved the NPM compatibility with --omit options. (#254 via #259)
• In case of an error, the exit code is guaranteed to be non-zero (via #260)

Misc

• Added more debug output regarding NPM version detection. (via #259)

---

Full Changelog: v1.2.0...v1.3.0