[BUG] Nested Components

[fnxpt]

Describe the bug

We noticed that nested components are being added with a | separated the parent component and the compontent.

cyclonedx-node-npm/src/builders.ts

Line 267 in 7ee7ee3

const fill = component.bomRef.value + '|'

Expected behavior

Components should be listed individually and the relation between them should be added on the dependencies node.

[jkowalleck]

Components should be listed individually and the relation between them should be added on the dependencies node.

how comes?

Please read the following:

• https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/docs/nodejs_internals.md
• https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/docs/result.md

After reading this, are you confident about your idea? Can you explain why?

[jkowalleck]

you are referring to a bom-ref that contains |? Is there something wrong with it?

[fnxpt]

Yes shouldn’t nested dependencies be marked individually and linked in the dependencies Sent from my iPhoneOn 30 Mar 2023, at 16:48, Jan Kowalleck ***@***.***> wrote: you are referring to a bom-ref that contains |? Is there something wrong with it? —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: ***@***.***>

[jkowalleck]

Yes shouldn’t nested dependencies be marked individually and linked in the dependencies

are they not? could you show on one of the demos/examples?

[jkowalleck]

i'll convert this to a discussion, so we could communicate in threads.