sbom
sbom copied to clipboard
Implement `component.group`
Purpose: Grouping related components for better organization.
Proposed:
defp determine_group(component) do
case component.package_url.type do
"otp" when is_erlang_stdlib(component.name) -> "erlang.otp"
"github" when is_elixir_stdlib(component.name) -> "elixir.stdlib"
_ -> nil
end
end
Output:
{
"name": "stdlib",
"group": "erlang.otp",
"type": "library"
},
{
"name": "logger",
"group": "elixir.stdlib",
"type": "library"
}
[!IMPORTANT] Question: ❓ Group naming convention:
- Should Hex organizations map to groups?