philips-software / blackduck-dependencies-to-reference-format Goto Github PK

Should generate info as reference extended format. Output is a json array of objects, each object having the following format:

• name
• version
• licenses (an array of string values separated by comma)

Example:

[
  {
     name: 'istanbul-lib-source-maps',
     version: '3.0.6',
     licenses: ['BSD', 'BSD-3-Clause']
  }
]

There are situations where the same dependency is reported as both Transient and Direct dependency, in the source.csv file.
Currently the tool does not remove the (name+version) duplicates; please add this feature

This is needed because the format of the contents of the Origin name id field in Detect's output source.csv may vary per technology of the project being analysed (new information)
E.g.,

• for Javascript projects, the format is name/version
• for Java projects, the format is name:version
  Currently only the / separator is supported (and assumed).

Suggestion is to add a new parameter to the command line interface, to override the default nave/version separator.