`@cyclonedx/cdxgen`

Ecosystem:
npm

Package URL:
pkg:npm/@cyclonedx/cdxgen

Total PRs:
38 Dependabot PRs

Latest PR:
15 days ago

Unique Repositories:
15 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry

GHSA-qhh4-458h-xwh2 MODERATE published about 1 month ago • updated 15 days ago

# Docker registry auth substring match forwards credentials to a different registry ## Repository `cdxgen/cdxgen` ## Affected product/package -...

CycloneDX cdxgen may execute code contained within build-related files

GHSA-hxf3-vgpm-fv9p CVE-2024-50611 MODERATE published over 1 year ago • updated 20 days ago

CycloneDX cdxgen prior to 11.1.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradl...

Recent PRs

chore(deps)(deps): bump the production-dependencies group with 6 updates

localgod/polaris #605

12.4.3 → 12.5.0 Minor PR

Open 15 days ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 12.4.1 to 12.4.3

hoangsnowy/loopbridge #32

12.4.1 → 12.4.3 Patch PR

Open 23 days ago 1 comment

chore(deps): bump the development group with 2 updates

Kuonirad/MCOP-Framework-2.0 #614

12.3.0 → 12.3.2 Patch PR

Open about 1 month ago 2 comments

chore(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates

marcstraube/zappzarapp-node-browser-utils #84

12.1.5 → 12.3.0 Minor PR

Open about 2 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 12.1.4 to 12.2.1 in the dev-deps group

RideMatch1/a.e.g.i.s #9

12.1.4 → 12.2.1 Minor PR

Open about 2 months ago 1 comment

chore(deps)(deps-dev): bump the development-dependencies group with 5 updates

localgod/polaris #254

12.1.2 → 12.1.3 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the production-dependencies group with 3 updates

appwarden/middleware #262

12.1.1 → 12.1.2 Patch PR

Open 3 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 12.1.1 to 12.1.2

jlov7/runwright #18

12.1.1 → 12.1.2 Patch PR

Closed 3 months ago 1 comment

ci(deps): Bump @cyclonedx/cdxgen from 11.0.0 to 11.1.7 in /.github/tools

mbarbero/codesign-maven-plugin #37

11.0.0 → 11.1.7 Minor PR

Closed 4 months ago 1 comment

chore(deps-dev): bump the production-dependencies group with 2 updates

appwarden/middleware #183

12.1.0 → 12.1.1 Patch PR

Open 4 months ago 1 comment

chore(deps-dev): bump the dev-dependencies group with 8 updates

marcstraube/zappzarapp-node-browser-utils #22

12.0.0 → 12.1.0 Minor PR

Closed 4 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 11.10.0 to 11.11.0

sapientpants/agentic-node-ts-starter #153

11.10.0 → 11.11.0 Minor PR

Closed 7 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 11.9.0 to 11.10.0

sapientpants/agentic-node-ts-starter #141

11.9.0 → 11.10.0 Minor PR

Closed 8 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 11.1.7 to 11.10.0 in /frontend

hopps-app/hopps #468

11.1.7 → 11.10.0 Minor PR

Closed 8 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 11.1.7 to 11.9.0 in /frontend

hopps-app/hopps #462

11.1.7 → 11.9.0 Minor PR

Closed 8 months ago 1 comment

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.9.0

rlmestre/herodevs-cli #83

11.2.3 → 11.9.0 Minor PR

Open 8 months ago

Bump @cyclonedx/cdxgen from 11.7.0 to 11.8.0

SocketDev/socket-cli #764

11.7.0 → 11.8.0 Minor PR

Open 9 months ago 4 comments

chore(deps-dev): bump @cyclonedx/cdxgen from 11.7.0 to 11.8.0

sapientpants/sonarqube-mcp-server #286

11.7.0 → 11.8.0 Minor PR

Closed 9 months ago 1 comment

chore(deps-dev): bump @cyclonedx/cdxgen from 11.1.7 to 11.8.0 in /frontend

hopps-app/hopps #455

11.1.7 → 11.8.0 Minor PR

Open 9 months ago

chore(deps): bump @cyclonedx/cdxgen from 11.4.4 to 11.7.0

herodevs/cli #342

11.4.4 → 11.7.0 Minor PR

Open 9 months ago

chore(deps-dev): bump @cyclonedx/cdxgen from 11.6.0 to 11.7.0

sapientpants/deepsource-mcp-server #149

11.6.0 → 11.7.0 Minor PR

Closed 9 months ago 2 comments

build(deps-dev): bump @cyclonedx/cdxgen from 10.11.0 to 11.6.0 in /frontend

hopps-app/hopps #426

10.11.0 → 11.6.0 Major PR

Open 10 months ago 2 comments

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.5.0

rlmestre/herodevs-cli #57

11.2.3 → 11.5.0 Minor PR

Open 10 months ago

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.4.4

rlmestre/herodevs-cli #49

11.2.3 → 11.4.4 Minor PR

Open 11 months ago

Bump @cyclonedx/cdxgen from 10.11.0 to 11.4.4 in /frontend

hopps-app/hopps #414

10.11.0 → 11.4.4 Major PR

Closed 11 months ago 1 comment

Bump @cyclonedx/cdxgen from 10.11.0 to 11.1.7 in /frontend in the npm_and_yarn group

hopps-app/hopps #410

10.11.0 → 11.1.7 Major PR

Open 11 months ago

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.4.3

rlmestre/herodevs-cli #44

11.2.3 → 11.4.3 Minor PR

Open 11 months ago

chore(deps): bump @cyclonedx/cdxgen from 11.3.2 to 11.4.1

herodevs/cli #270

11.3.2 → 11.4.1 Minor PR

Closed 12 months ago 1 comment

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.4.1

rlmestre/herodevs-cli #38

11.2.3 → 11.4.1 Minor PR

Open 12 months ago

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.4.0

rlmestre/herodevs-cli #35

11.2.3 → 11.4.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.3.2

rlmestre/herodevs-cli #26

11.2.3 → 11.3.2 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.3.1

rlmestre/herodevs-cli #24

11.2.3 → 11.3.1 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump @cyclonedx/cdxgen from 11.2.7 to 11.3.1

herodevs/cli #235

11.2.7 → 11.3.1 Minor PR

Open about 1 year ago

chore(deps): bump @cyclonedx/cdxgen from 11.2.3 to 11.2.7

rlmestre/herodevs-cli #19

11.2.3 → 11.2.7 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump @cyclonedx/cdxgen from 11.2.6 to 11.2.7

herodevs/cli #217

11.2.6 → 11.2.7 Patch PR

Merged about 1 year ago

Package Details

Name:	`@cyclonedx/cdxgen`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@cyclonedx/cdxgen`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All npm Advisories

Package Information

Description:

Creates CycloneDX Software Bill of Materials (SBOM) from source or container image

Repository:	https://github.com/CycloneDX/cdxgen
Homepage:	http://github.com/cyclonedx/cdxgen
Latest Release:	`11.3.2` about 1 year ago
Dependent Repos:	1
Dependent Packages:	0
Downloads:	249,006
Ranking:	Top 10.7024% by dependent repos Top 0.3693% by downloads Top 52.6392% by dependent pkgs

PR Status

Open 19 (50.0%)

Merged 1 (2.6%)

Closed 15 (39.5%)

PR Types

Minor 24 (63.2%)

Patch 8 (21.1%)