Skip to content

Commit 3bff7e3

Browse files
authored
fix: replace markdown-toc with remark (#11)
same rational as mnahkies/openapi-code-generator#377
1 parent 10b8019 commit 3bff7e3

File tree

2 files changed

+30
-32
lines changed

2 files changed

+30
-32
lines changed

README.md

Lines changed: 29 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -9,32 +9,30 @@ also caution that the SPDX files produced by Github seem a bit rough around the
99
This project is very early stage - it's pretty rough around the edges, has no tests, and is
1010
limited in features. Expect a bunch of breaking changes as I learn more about the world of processing SBOMs.
1111

12-
<!-- toc -->
12+
## Contents
1313

14-
- [Features](#features)
15-
- [Future](#future)
16-
- [Running it](#running-it)
17-
- [Screenshots](#screenshots)
18-
- [Architecture / Notes](#architecture--notes)
19-
- [Acknowledgements / References](#acknowledgements--references)
20-
21-
<!-- tocstop -->
14+
* [Features](#features)
15+
* [Future](#future)
16+
* [Running it](#running-it)
17+
* [Screenshots](#screenshots)
18+
* [Architecture / Notes](#architecture--notes)
19+
* [Acknowledgements / References](#acknowledgements--references)
2220

2321
## Features
2422

25-
- Crawl Github repositories extracting SBOM's using a PAT (Github Personal Access Token)
26-
- Fills in gaps for `npm` packages by reading metadata from the NPM Registry directly
27-
- Render back summary and detail views, including risk categories
23+
* Crawl Github repositories extracting SBOM's using a PAT (Github Personal Access Token)
24+
* Fills in gaps for `npm` packages by reading metadata from the NPM Registry directly
25+
* Render back summary and detail views, including risk categories
2826

2927
## Future
3028

31-
- More filtering, sorting, etc options
32-
- Export to CSV / spreadsheet report
33-
- Allow upload of a SPDX file directly rather than crawling Github
34-
- Allow overriding data, eg: correct a license
35-
- Pull in CVE alerts
36-
- Tidy up the API, it's a bit haphazard right now
37-
- Add tests
29+
* More filtering, sorting, etc options
30+
* Export to CSV / spreadsheet report
31+
* Allow upload of a SPDX file directly rather than crawling Github
32+
* Allow overriding data, eg: correct a license
33+
* Pull in CVE alerts
34+
* Tidy up the API, it's a bit haphazard right now
35+
* Add tests
3836

3937
## Running it
4038

@@ -47,7 +45,7 @@ cp .env.example .env # modify settings as needed
4745
pnpm run dev
4846
```
4947

50-
Open [http://localhost:3000](http://localhost:3000) to use the application.
48+
Open <http://localhost:3000> to use the application.
5149
Data will be written to the sqlite db specified by `DB_PATH`.
5250

5351
## Screenshots
@@ -58,17 +56,17 @@ Data will be written to the sqlite db specified by `DB_PATH`.
5856

5957
## Architecture / Notes
6058

61-
- Implemented as a single [NextJS](https://nextjs.org/) application.
62-
- [mui](https://mui.com/) is used as the component library
63-
- [sqlite](https://sqlite.org/) is used as the database for data persistence
64-
- Database migrations are generated/managed by [atlas](https://atlasgo.io/), see [migrate.sh](./bin/migrate.sh) / [migrate-generate.sh](./bin/migrate-generate.sh)
65-
- Database schema is introspected to produce [zod](https://zod.dev/) schemas for each table, using a script I haven't published anywhere yet
66-
- An basic [openapi.yaml](./openapi.yaml) specification is used to generate most of the client/server glue using [experimental nextjs template](https://github.com/mnahkies/openapi-code-generator/pull/152)
67-
- [mnahkies/openapi-code-generator](https://github.com/mnahkies/openapi-code-generator) is also used to generate the Github client
68-
- License data was scraped from [dependency-track](https://github.com/DependencyTrack/dependency-track)
59+
* Implemented as a single [NextJS](https://nextjs.org/) application.
60+
* [mui](https://mui.com/) is used as the component library
61+
* [sqlite](https://sqlite.org/) is used as the database for data persistence
62+
* Database migrations are generated/managed by [atlas](https://atlasgo.io/), see [migrate.sh](./bin/migrate.sh) / [migrate-generate.sh](./bin/migrate-generate.sh)
63+
* Database schema is introspected to produce [zod](https://zod.dev/) schemas for each table, using a script I haven't published anywhere yet
64+
* An basic [openapi.yaml](./openapi.yaml) specification is used to generate most of the client/server glue using [experimental nextjs template](https://github.com/mnahkies/openapi-code-generator/pull/152)
65+
* [mnahkies/openapi-code-generator](https://github.com/mnahkies/openapi-code-generator) is also used to generate the Github client
66+
* License data was scraped from [dependency-track](https://github.com/DependencyTrack/dependency-track)
6967

7068
## Acknowledgements / References
7169

72-
- [dependency-track](https://github.com/DependencyTrack/dependency-track)
73-
- [spdx-spec](https://spdx.github.io/spdx-spec/v2.3/)
74-
- [github docs](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/exporting-a-software-bill-of-materials-for-your-repository)
70+
* [dependency-track](https://github.com/DependencyTrack/dependency-track)
71+
* [spdx-spec](https://spdx.github.io/spdx-spec/v2.3/)
72+
* [github docs](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/exporting-a-software-bill-of-materials-for-your-repository)

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
"test": "NODE_OPTIONS=--experimental-vm-modules jest",
1212
"lint": "biome lint --write .",
1313
"format": "biome check --write .",
14-
"docs:generate": "pnpm exec markdown-toc -i --bullets=- ./README.md",
14+
"docs:generate": "node ./bin/generate-toc.mjs",
1515
"migrate": "dotenvx run -- ./bin/migrate.sh",
1616
"migrate-generate": "dotenvx run -- ./bin/migrate-generate.sh",
1717
"migrate-rehash": "dotenvx run -- atlas migrate hash --dir 'file://migrations",

0 commit comments

Comments
 (0)