All issues

Search results

SPDX 2.3 serializer writes invalid SPDXIDs when node IDs come from CycloneDX bom-refs

Status: Open.

#478 In protobom/protobom;

· sh-azizov opened on Sep 18, 2026

Consider validating SPDX id's and expressions

enhancementNew feature or requestNew feature or request

Status: Open.

#449 In protobom/protobom;

· puerco opened on Aug 13, 2026

I've created a Vulnerability Disclosure Report (VDR) for Protobom V 0.5.8

Status: Open.

#439 In protobom/protobom;

· rjb4standards opened on Jul 26, 2026

CycloneDX unserializer drops metadata.tools — Document.Metadata.Tools always empty

Status: Open.

#417 In protobom/protobom;

· nchelluri opened on Jun 3, 2026

Proposal: Deprecate Tool and use Node instead

proposala proposal :)a proposal :)

Status: Open.

#68 In protobom/protobom;

· manifestori opened on Aug 9, 2023