pixi-sbom

소개

pixi-sbom is a Pixi extension that generates Software Bills of Materials (SBOMs) from Pixi manifests and lock files, supporting dependency visibility, reproducibility, and supply-chain security workflows.

저장소 README에서 가져옴

README

README 전체를 불러오는 중입니다. 아래는 저장된 발췌입니다.

A pixi extension that generates a Software Bill of Materials (SBOM) from a pixi.lock file, in CycloneDX 1.6 / 1.7 or SPDX 2.3 / 3.0.1 JSON. Full documentation: https://millsks.github.io/pixi-sbom/ What 1.0 freezes, and what it does not: stability.md Found a vulnerability? SECURITY.md says where to send it privately and what is in scope. Each report has a recording of its own in the command-line reference: vulnerabilities, licenses, packages, diff, python, phantom, outdated and scorecard. [README 설치·사용 부분 발췌] Installation