Moullisha

Unable to use plain html tags inside FormField

1

Using html tag inside FormField doesn't update the data and touched property comes out to be empty even though a value was entered for the input field. ### Expected Behavior...

Correct way to represent repository location for a package in SBOM.

9

Hello, Can someone provide insight into what could be the best way to mention the repository location for a package out of the two methods mentioned below: **Method 1**: Using...

SPDX documentation not in sync with schema

4

documentNamespace is a required field in v2.3.0 as per documentation but has not been mentioned in the required array in schema 

Ambiguity in SPDX documentation in relation b/w files and filesAnalyzed fields

1

As per the below code snippet, if filesAnalyzed is true, files array must contain any files related to the package. No clear correlation between the **files** and the **filesAnalyzed** field...

Splitting purl remainder from right on '@' to extract version

6

NPM purls contain namespaces starting with @ pkg:npm/@aws-crypto/[email protected]

PackageURL.fromString("pkg:golang//github.com/ll/[email protected]") throws the below error: purl is missing the required "type" component

Always return the upstream aliases when no alias groups are generated

13

**Describe the bug** Some vulnerabilities in OSV do not mention alias whereas the source link has alias data. **To Reproduce** https://vuln.go.dev/ID/GO-2024-2947.json mentions two aliases whereas https://api.osv.dev/v1/vulns/GO-2024-2947 does not. Similar behaviour...

Duplicate entries found for package **causalml** with IDs [2973 ](https://www.bestpractices.dev/en/projects/2973) and [3015](https://www.bestpractices.dev/en/projects/3015). The GitHub URL is different but both actually point to the same repo. Could someone please help understand...

**Describe the bug** documentDescribes is a deprecated field and should not be used to describe relationships in SBOM. Instead relationships array should be used. **System configuration** - Which version of...