Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

cdxgen generating high number of components compared to snyk

See original GitHub issue

Hi @prabhu I just observed that cdxgen is generating a very high number of dependencies compared to snyk. Especially for the repo: https://github.com/snyk-labs/nodejs-goof.

Snyk listed about 565 dependencies. And for the same project cdxgen listed about 969 dependencies. Just wanted to understand if this is by design.

Issue Analytics

State:
Created a year ago
Comments:9

Top GitHub Comments

1reaction

kakumanivrncommented, Sep 15, 2022

Great! In that case I’ll close this issue.

0reactions

prabhucommented, Oct 4, 2022

Linked: https://github.com/AppThreat/cdxgen/issues/164

Top Results From Across the Web

@appthreat/cdxgen - npm Package Health Analysis | Snyk

When used with plugins, cdxgen could generate an SBoM for Linux docker images and even VMs running Linux or Windows operating system.

required-only doesn't include transitive dependencies · Issue ...

When using the --required-only option, cdxgen uses babel-parser to ... cdxgen generating high number of components compared to snyk #151.

Creating SBOMs with the Snyk CLI – Craig Andrews

The Snyk CLI is a great tool used to scan a project and report vulnerabilities discovered in it. The Snyk CLI supports a...

Tweets with replies by CycloneDX SBOM Spec (OWASP ...

#cdxgen 6 now supports uploading the full dependency graph to ... CycloneDX provides various tool sets to generate SBOM from many different programing ......

SBOM 101 - All the questions you were afraid to ask Software ...

What if we had a way to enumerate all the software components we use ... Many tools exist that can help you create...