NPM.SBOM (NPM v0.6.0)

Software Bill of Materials (SBOM) generation.

Generates CycloneDX-compatible SBOM data from the lockfile, listing all dependencies with versions, licenses, and integrity hashes.

Summary

Returns the count of components in the SBOM.

Filters SBOM components by a predicate.

Generates a minimal SBOM from lockfile only (no filesystem access).

Generates an SBOM from the lockfile and node_modules.

Generates a Package URL (purl) for an npm package.

@spec component_count(map()) :: non_neg_integer()

Returns the count of components in the SBOM.

@spec filter(map(), (map() -> boolean())) :: map()

Filters SBOM components by a predicate.

@spec from_lockfile(map()) :: map()

Generates a minimal SBOM from lockfile only (no filesystem access).

@spec generate(map(), String.t()) :: map()

Generates an SBOM from the lockfile and node_modules.

@spec purl(String.t(), String.t()) :: String.t()

Generates a Package URL (purl) for an npm package.