From 2c50deaa058f4e0d7e6af3c491a895ec5bc2dbe2 Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Fri, 10 Jul 2026 18:51:29 +0200 Subject: [PATCH 1/3] docs: native command for pnpm Signed-off-by: Jan Kowalleck --- HISTORY.md | 2 ++ README.md | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/HISTORY.md b/HISTORY.md index 17906484..d9158ada 100644 --- a/HISTORY.md +++ b/HISTORY.md @@ -7,9 +7,11 @@ All notable changes to this project will be documented in this file. * Docs + * Acknowledge native command for _pnpm_ (via [#]) * Fix link for _Bun_ (via [#382]) [#382]: https://github.com/CycloneDX/cyclonedx-node-module/pull/382 +[#]: ## 4.1.5 - 2026-03-19 diff --git a/README.md b/README.md index feb4b0f1..6481227b 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ generate _[CycloneDX][link_website]_ Software-Bill-of-Materials (SBOM) from _nod | Ecosystem | Actual Tool | |:---------:|:------------| | _npm_ | [@cyclonedx/cyclonedx-npm](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-npm) | -| _pnpm_ | To be announced, suggestions welcome.
Candidate: [cyclonedx-node-pnpm](https://github.com/CycloneDX/cyclonedx-node-pnpm) | +| _pnpm_ | use native command: [`pnpm sbom`](https://pnpm.io/cli/sbom) | | _yarn_ | [@cyclonedx/yarn-plugin-cyclonedx](https://www.npmjs.com/package/%40cyclonedx/yarn-plugin-cyclonedx) | *) You should not depend on this very meta-package, instead depend on the actual tool that fits your specific (eco)system. From c3885b0dcc92665b105c9086bb3728984911c463 Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Fri, 10 Jul 2026 18:52:49 +0200 Subject: [PATCH 2/3] docs Signed-off-by: Jan Kowalleck --- HISTORY.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/HISTORY.md b/HISTORY.md index d9158ada..1740a118 100644 --- a/HISTORY.md +++ b/HISTORY.md @@ -7,11 +7,11 @@ All notable changes to this project will be documented in this file. * Docs - * Acknowledge native command for _pnpm_ (via [#]) + * Acknowledge native command for _pnpm_ (via [#406]) * Fix link for _Bun_ (via [#382]) [#382]: https://github.com/CycloneDX/cyclonedx-node-module/pull/382 -[#]: +[#406]: https://github.com/CycloneDX/cyclonedx-node-module/pull/406 ## 4.1.5 - 2026-03-19 From 67ede3024e50264f834a8e8a5da14c76caa62736 Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Fri, 10 Jul 2026 18:57:19 +0200 Subject: [PATCH 3/3] docs Signed-off-by: Jan Kowalleck --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 6481227b..50f1f855 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ generate _[CycloneDX][link_website]_ Software-Bill-of-Materials (SBOM) from _nod | Ecosystem | Actual Tool | |:---------:|:------------| | _npm_ | [@cyclonedx/cyclonedx-npm](https://www.npmjs.com/package/%40cyclonedx/cyclonedx-npm) | -| _pnpm_ | use native command: [`pnpm sbom`](https://pnpm.io/cli/sbom) | +| _pnpm_ | Native subcommand: [`pnpm sbom`](https://pnpm.io/cli/sbom) | | _yarn_ | [@cyclonedx/yarn-plugin-cyclonedx](https://www.npmjs.com/package/%40cyclonedx/yarn-plugin-cyclonedx) | *) You should not depend on this very meta-package, instead depend on the actual tool that fits your specific (eco)system.