Deprecated

• The class HashRepository will be known as HashDictionary. (via #229)

Full Changelog: v1.4.2...v1.5.0

Maintenance release.

Build

• Use TypeScript v4.8.3 now, was v4.8.2. (via #212)

Maintenance release.

Misc

• Style: imports are sorted, now. (via #208)

Dependencies

• Widened the range of requirement packageurl-js to >=0.0.6 <0.0.8 || ^1, was >=0.0.6 <0.0.8. (via #210)

Added

• New class Factories.FromNodePackageJson.PackageUrlFactory that acts like Factories.PackageUrlFactory, but
  omits PackageUrl's npm-specific "default derived" qualifier values for download_url & vcs_url. (#204 via #207)

Build

• Use TypeScript v4.8.2 now, was v4.7.4. (via #190)

Fixed

• Factories.PackageUrlFactory omits empty-string URLs for PackageUrl's qualifiers download_url & vcs_url. (via #180)

Fixed

• Improved omission of invalid anyURI when it comes to XML-normalization. (#178 via #179)

Fixed

• Serializers render bom-ref values of nested components as unique values, as expected. (#175 via #176)

Misc

• Style: improved readability of constructor parameter types. (via #166)

Fixed

• JSON- and XML-Normalizer no longer render Models.Component.properties with CycloneDX Specification-1.2. (#152 via #153)
• XML-Normalizer now has the correct order/position of rendered Models.Component.properties. (via #153)

Changed

• Use version 9b04a94 of CycloneDX specification for XML and JSON schema validation. (via #150)
• Use SPDX license enumeration from version 9b04a94 of CycloneDX specification. (via #150)

Added

• Models for Property and PropertyRepository. (via #151)
• JSON- and XML-Normalizer for Models.Property, Models.PropertyRepository. (via #151)
• New property Models.Component.properties. (via #151)

Build

• Use Webpack v5.74.0. now, was 5.73.0. (via #141)

Added

• New getters/properties that represent the corresponding parameters of class constructor. (via #145)
  • Builders.FromPackageJson.ComponentBuilder.extRefFactory,
    Builders.FromPackageJson.ComponentBuilder.licenseFactory
  • Builders.FromPackageJson.ToolBuilder.extRefFactory
  • Factories.PackageUrlFactory.type
  • Serialize.BomRefDiscriminator.prefix
  • Serialize.JsonSerializer.normalizerFactory
  • Serialize.XmlBaseSerializer.normalizerFactory,
    Serialize.XmlSerializer.normalizerFactory
• Factory for PackageURL from Models.Component can handle additional data sources, now. (via #146)
  • Models.Component.hashes map -> PackageURL.qualifiers.checksum list
  • Models.Component.externalReferences[distribution].url -> PackageURL.qualifiers.download_url
  • Method Factories.PackageUrlFactory.makeFromComponent() got a new optional parameter sort,
    to indicate whether to go the extra mile and bring hashes and qualifiers in alphabetical order.
    This feature switch is related to reproducible builds.

Deprecated

• The sub-namespace FromPackageJson will be known as FromNodePackageJson. (via #148)
  • Factories.FromPackageJson -> Factories.FromNodePackageJson
  • Builders.FromPackageJson -> Builders.FromNodePackageJson