Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/CycloneDX/cyclonedx-webpack-plugin

bill-of-materials bom cyclonedx hacktoberfest javascript mbom owasp package-url purl sbom sbom-generator sbom-tool software-bill-of-materials spdx webpack webpack-plugin

Score: 17.801399151887882

Last synced: about 19 hours ago
JSON representation

Repository metadata:

Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 2 days ago

Total Commits: 1,090
Total Committers: 9
Avg Commits per committer: 121.111
Development Distribution Score (DDS): 0.338

Commits in past year: 113
Committers in past year: 3
Avg Commits per committer in past year: 37.667
Development Distribution Score (DDS) in past year: 0.336

Name Email Commits
dependabot[bot] 4****] 722
Jan Kowalleck j****k@g****m 338
Steve Springett s****e@s****s 22
Jeremy Long j****g@g****m 3
Tristan Bastian t****n@g****e 1
Peter Schuster d****t@p****e 1
Frozen_byte F****e@g****e 1
Drew Thompson d****n@g****m 1
Copilot 1****t 1

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 35
Total pull requests: 547
Average time to close issues: 2 months
Average time to close pull requests: 9 days
Total issue authors: 10
Total pull request authors: 6
Average comments per issue: 1.77
Average comments per pull request: 0.96
Merged pull request: 311
Bot issues: 0
Bot pull requests: 431

Past year issues: 2
Past year pull requests: 80
Past year average time to close issues: 29 days
Past year average time to close pull requests: 19 days
Past year issue authors: 1
Past year pull request authors: 2
Past year average comments per issue: 0.0
Past year average comments per pull request: 1.89
Past year merged pull request: 27
Past year bot issues: 0
Past year bot pull requests: 70

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/CycloneDX/cyclonedx-webpack-plugin

Top Issue Authors

  • jkowalleck (24)
  • sresch4b (2)
  • jeremylong (2)
  • RobertDr (1)
  • rdeangelis83 (1)
  • Frozen-byte (1)
  • twilhelmdccs (1)
  • mLuca (1)
  • qwelol (1)
  • tomsontom (1)

Top Pull Request Authors

  • dependabot[bot] (431)
  • jkowalleck (100)
  • jeremylong (10)
  • Frozen-byte (3)
  • reey (2)
  • lal12 (1)

Top Issue Labels

  • enhancement (15)
  • bug (7)
  • help wanted (6)
  • hacktoberfest (4)
  • breaking-change (3)
  • chore (3)
  • schema 1.5 (3)
  • CI (3)
  • CT (2)
  • good first issue (2)
  • QA (2)
  • schema 1.6 (1)
  • ValidationError (1)
  • documentation (1)
  • dependencies (1)
  • idea (1)

Top Pull Request Labels

  • dependencies (453)
  • chore (23)
  • enhancement (22)
  • javascript (20)
  • documentation (11)
  • CT (9)
  • QA (9)
  • breaking-change (8)
  • bug (8)
  • CI (8)
  • schema 1.6 (4)
  • schema 1.5 (3)
  • help wanted (2)
  • idea (1)

Package metadata

npmjs.org: @cyclonedx/webpack-plugin

Creates CycloneDX Software Bill of Materials (SBoM) from webpack projects

  • Homepage: https://github.com/CycloneDX/cyclonedx-webpack-plugin#readme
  • Licenses: Apache-2.0
  • Latest release: 5.3.3 (published 3 months ago)
  • Last Synced: 2026-10-31T12:57:41.818Z (2 days ago)
  • Versions: 62
  • Dependent Packages: 1
  • Dependent Repositories: 7
  • Downloads: 115,015 Last month
  • Rankings:
    • Downloads: 1.035%
    • Dependent repos count: 4.32%
    • Stargazers count: 7.596%
    • Forks count: 7.707%
    • Average: 8.314%
    • Dependent packages count: 20.912%
  • Maintainers (5)
  • Funding:
    • type: individual: url: https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX

Dependencies

examples/simple/package.json npm
  • @cyclonedx/webpack-plugin file:../.. development
  • webpack ^5 development
  • webpack-cli ^4 development
  • @popperjs/core ^2
  • blueimp-gallery ^3
  • bootstrap ^5
package.json npm
  • @types/node ^18.0.0 development
  • @types/webpack ^5.28.0 development
  • eslint-config-standard-with-typescript ^21.0.1 development
  • jest 28.1.1 development
  • jest-junit 14.0.0 development
  • npm-run-all ^4.1.5 development
  • ts-standard ^11.0.0 development
  • typescript ^4.7.3 development
  • webpack ^5.0.0 development
  • @cyclonedx/cyclonedx-library ^1.0.0
  • read-pkg-up ^7.0.0
  • xmlbuilder2 ^3.0.2
.github/workflows/nodejs.yml actions
  • actions/checkout v3 composite
  • actions/download-artifact v3 composite
  • actions/setup-node v3 composite
  • actions/upload-artifact v3 composite
.github/workflows/release.yml actions
  • actions/checkout v3 composite
  • actions/setup-node v3 composite
  • softprops/action-gh-release v1 composite
tests/_testbeds/regression-issue1418/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • webpack ^5 development
  • webpack-cli ^5 development
  • libphonenumber-js 1.11.16
tests/_testbeds/regression-issue745/package-lock.json npm
  • 139 dependencies
tests/_testbeds/webpack5-angular13/package.json npm
  • @angular-builders/custom-webpack ^13.1.0 development
  • @angular-devkit/build-angular ~13.3.3 development
  • @angular/cli ~13.3.3 development
  • @angular/compiler-cli ~13.3.0 development
  • @cyclonedx/webpack-plugin file:../../.. development
  • @types/jasmine ~3.10.0 development
  • @types/node ^12.11.1 development
  • jasmine-core ~4.0.0 development
  • karma ~6.3.0 development
  • karma-chrome-launcher ~3.1.0 development
  • karma-coverage ~2.1.0 development
  • karma-jasmine ~4.0.0 development
  • karma-jasmine-html-reporter ~1.7.0 development
  • typescript ~4.6.2 development
  • webpack ^5 development
  • @angular/animations ~13.3.0
  • @angular/common ~13.3.0
  • @angular/compiler ~13.3.0
  • @angular/core ~13.3.0
  • @angular/forms ~13.3.0
  • @angular/platform-browser ~13.3.0
  • @angular/platform-browser-dynamic ~13.3.0
  • @angular/router ~13.3.0
  • rxjs ~7.5.0
  • tslib ^2.3.0
  • zone.js ~0.11.4
tests/_testbeds/webpack5-angular17/package.json npm
  • @angular-builders/custom-webpack ^17.0.1 development
  • @angular-devkit/build-angular ^17.3.0 development
  • @angular/cli ^17.3.0 development
  • @angular/compiler-cli ^17.3.0 development
  • @cyclonedx/webpack-plugin file:../../.. development
  • typescript ~5.4.2 development
  • webpack ^5 development
  • @angular/animations ^17.3.0
  • @angular/common ^17.3.0
  • @angular/compiler ^17.3.0
  • @angular/core ^17.3.0
  • @angular/forms ^17.3.0
  • @angular/platform-browser ^17.3.0
  • @angular/platform-browser-dynamic ^17.3.0
  • @angular/router ^17.3.0
  • rxjs ~7.8.0
  • tslib ^2.3.0
  • zone.js ~0.14.3
tests/_testbeds/webpack5-vue2-yarn/package.json npm
  • @cyclonedx/webpack-plugin link:../../.. development
  • html-inline-script-webpack-plugin ^3.0.0 development
  • html-webpack-plugin ^5.5.0 development
  • webpack ^5 development
  • webpack-cli ^5 development
  • vue ^2.6.14
.github/workflows/zizmor.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • zizmorcore/zizmor-action 3dc1ecc9bcb9e94e9b2c709687979e1298497054 composite
tests/_testbeds/regression-issue1337/package-lock.json npm
  • 130 dependencies
tests/_testbeds/feature-issue676/package-lock.json npm
  • 896 dependencies
tests/_testbeds/feature-issue676/package.json npm
  • @angular-builders/custom-webpack ^18.0.0 development
  • @angular/build ^18.2.7 development
  • @angular/cli ^18.2.7 development
  • @angular/compiler-cli ^18.2.7 development
  • @cyclonedx/webpack-plugin file:../../.. development
  • typescript ~5.4.2 development
  • webpack ^5 development
  • @angular/animations ^18.2.7
  • @angular/common ^18.2.7
  • @angular/compiler ^18.2.7
  • @angular/core ^18.2.7
  • @angular/forms ^18.2.7
  • @angular/platform-browser ^18.2.7
  • @angular/platform-browser-dynamic ^18.2.7
  • @angular/router ^18.2.7
  • rxjs ~7.8.0
  • tslib ^2.3.0
  • zone.js ~0.14.10
tests/_testbeds/regression-issue1337/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • webpack ^5 development
  • webpack-cli ^5 development
  • buffer ^6.0.3
  • esprima 4.0.1
  • libphonenumber-js 1.11.16
  • stream-browserify 3.0.0
  • through 2.3.8
tests/_testbeds/regression-issue1384/package-lock.json npm
  • 120 dependencies
tests/_testbeds/webpack5-react18/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • @babel/core ^7.16.0
  • @pmmmwh/react-refresh-webpack-plugin ^0.5.3
  • @svgr/webpack ^5.5.0
  • @testing-library/jest-dom ^5.16.4
  • @testing-library/react ^13.3.0
  • @testing-library/user-event ^13.5.0
  • babel-jest ^27.4.2
  • babel-loader ^8.2.3
  • babel-plugin-named-asset-import ^0.3.8
  • babel-preset-react-app ^10.0.1
  • bfj ^7.0.2
  • browserslist ^4.18.1
  • camelcase ^6.2.1
  • case-sensitive-paths-webpack-plugin ^2.4.0
  • css-loader ^6.5.1
  • css-minimizer-webpack-plugin ^3.2.0
  • dotenv ^10.0.0
  • dotenv-expand ^5.1.0
  • eslint ^8.3.0
  • eslint-config-react-app ^7.0.1
  • eslint-webpack-plugin ^3.1.1
  • file-loader ^6.2.0
  • fs-extra ^10.0.0
  • html-webpack-plugin ^5.5.0
  • identity-obj-proxy ^3.0.0
  • jest ^27.4.3
  • jest-resolve ^27.4.2
  • jest-watch-typeahead ^1.0.0
  • mini-css-extract-plugin ^2.4.5
  • postcss ^8.4.31
  • postcss-flexbugs-fixes ^5.0.2
  • postcss-loader ^6.2.1
  • postcss-normalize ^10.0.1
  • postcss-preset-env ^7.0.1
  • prompts ^2.4.2
  • react ^18.1.0
  • react-app-polyfill ^3.0.0
  • react-dev-utils ^12.0.1
  • react-dom ^18.1.0
  • react-refresh ^0.11.0
  • resolve ^1.20.0
  • resolve-url-loader ^4.0.0
  • sass-loader ^12.3.0
  • semver ^7.5.3
  • source-map-loader ^3.0.0
  • style-loader ^3.3.1
  • tailwindcss ^3.0.2
  • terser-webpack-plugin ^5.2.5
  • web-vitals ^2.1.4
  • webpack ^5
  • webpack-dev-server ^4.6.0
  • webpack-manifest-plugin ^4.0.2
  • workbox-webpack-plugin ^6.4.1
tests/_testbeds/webpack5-vue2-cli-service/package-lock.json npm
  • 620 dependencies
tests/_testbeds/webpack5-vue2-yarn/yarn.lock npm
  • 163 dependencies
tools/code-style/package.json npm
  • @eslint/js 9.39.1
  • eslint 9.39.1
  • eslint-config-love 134.0.0
  • eslint-plugin-import 2.32.0
  • eslint-plugin-jsdoc 61.4.1
  • eslint-plugin-license-header 0.8.0
  • eslint-plugin-n 17.23.1
  • eslint-plugin-promise 7.2.1
  • eslint-plugin-simple-import-sort 12.1.1
  • eslint-plugin-tsdoc 0.5.0
  • globals ^16.0.0
  • neostandard 0.12.2
  • typescript-eslint 8.48.0
tests/_testbeds/feature-issue1344/package-lock.json npm
  • 118 dependencies
tests/_testbeds/feature-issue1344/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • webpack ^5 development
  • webpack-cli ^5 development
tests/_testbeds/feature-issue1344-no-detect/package-lock.json npm
  • 118 dependencies
tests/_testbeds/feature-issue1344-no-detect/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • webpack ^5 development
  • webpack-cli ^5 development
tests/_testbeds/webpack5-react18/package-lock.json npm
  • 1170 dependencies
tests/_testbeds/regression-issue1284/package-lock.json npm
  • 122 dependencies
tests/_testbeds/regression-issue1284/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • @popperjs/core ^2.10.2 development
  • bootstrap ^5.1.3 development
  • webpack ^5.72.0 development
  • webpack-cli ^4.9.2 development
  • libphonenumber-js ^1.9.19
  • luxon 3.4.4
tests/_testbeds/webpack5-angular13/package-lock.json npm
  • 890 dependencies
tests/_testbeds/webpack5-angular17/package-lock.json npm
  • 832 dependencies
tests/_testbeds/regression-issue1284-yarn/package.json npm
  • @cyclonedx/webpack-plugin link:../../.. development
  • @popperjs/core ^2.10.2 development
  • bootstrap ^5.1.3 development
  • webpack ^5.72.0 development
  • webpack-cli ^4.9.2 development
  • libphonenumber-js ^1.9.19
  • luxon 3.4.4
tests/_testbeds/regression-issue1284-yarn/yarn.lock npm
  • 123 dependencies
tests/_testbeds/regression-issue745/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • webpack ^5 development
  • webpack-cli ^5 development
  • @apollo/client 3.7.10
  • react ^18.2.0
tests/_testbeds/webpack5-vue2/package-lock.json npm
  • 150 dependencies
tests/_testbeds/webpack5-vue2-cli-service/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • @vue/cli-service ~5.0.8 development
  • webpack ^5 development
  • vue ^2.7.3
tests/_testbeds/regression-issue1384/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • @db-ui/base ^0.29.2 development
  • webpack ^5 development
  • webpack-cli ^5 development
tests/_testbeds/regression-issue1418/package-lock.json npm
  • 119 dependencies
tests/_testbeds/webpack5-vue2/package.json npm
  • @cyclonedx/webpack-plugin file:../../.. development
  • html-inline-script-webpack-plugin ^3.0.0 development
  • html-webpack-plugin ^5.5.0 development
  • webpack ^5 development
  • webpack-cli ^5 development
  • vue ^2.6.14
tools/test-dependencies/package.json npm
  • knip 6.31.0