Provide PEP 770 SBOM files in generated wheels
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 48/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- python
- Domain
- build-system, release
Research direction
No specific files or tests are named. Start by reading PEP 770 and tracing the wheel-generation build process; done means generated wheels contain machine-readable SBOM files in their metadata directory that reflect the active build and platform dependencies.
Written by the indexing model from the issue text.
Description
As OpenCV and this Python bindings heavily rely on native code either part of vendored directories or custom locations and provide a great range of configuration options, it would be great if the build process would generate suitable SBOM files.
This would greatly improve downstream license compliance handling, as the build process is the only reliable resource where this information can be generated from.
At the moment, a third-party license file is provided (which is nice), but it is not machine-readable, possibly lacks relevant details and/or includes components which are not even active in the current build, like when disabling FFmpeg or the GUI, or when we only look at a Linux-specific wheels where we should not have to care about Windows- or Apple-only dependencies.
With PEP 770, a corresponding standard has been established for shipping the SBOM files as part of the metadata directory inside wheel files.
- Dominant language
- Python
- Stars
- 5.4k
- Forks
- 1k
- Avg merge
- 22h 17m
- Merged PRs (30d)
- 3
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from opencv/opencv-python
-
[DOC] README file Open
Difficulty 1/5 Under an hour Newbie friendliness 85/100
opencv/opencv-python#1217 · 3 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
opencv/opencv-python#1165 · 2 comments · 1 reaction ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
opencv/opencv-python#1273 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
opencv/opencv-python#1272 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 70/100
opencv/opencv-python#1268 · 1 comment ·
All issues in opencv/opencv-python
Similar issues
-
documentation help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
simonw/sqlite-utils#872 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100