CycloneDX/cyclonedx-node-yarn
feat: support for yarn protocol `jsr:`
Aberta
#289 aberto em 10 de abr. de 2025
enhancementhelp wanted
Métricas do repositório
- Stars
- (27 estrelas)
- Métricas de merge de PR
- (Métricas PR pendentes)
Description
Is your feature request related to a problem? Please describe.
since yarn 4.9.0 they have native support for protocol jsr. see https://github.com/yarnpkg/berry/releases/tag/%40yarnpkg/cli/4.9.0
lets add support for it!
Describe the solution you'd like
JSR packages have the download location have the "correct" (whatever this means) properties:
- download location is on JSR
- PackageURL uses
jsrfor type -- see https://github.com/package-url/purl-spec/issues/457
test bed should be a new one called jsr-protocol-dependency!
Describe alternatives you've considered
/
Additional context
- see related test bed: https://github.com/CycloneDX/cyclonedx-node-yarn/tree/main/tests/_data/testbeds/alternative-package-registry
- purl type requested - https://github.com/package-url/purl-spec/issues/457
Contribution
- I am willing to provide an implementation
- I will wait until somebody else implements it