5.4.0

Improvements

• Add possibility to exclude specific versions for a vulnerability (example: jquery-1.12.4-aem which has some extra patches).

5.3.0

[5.3.0]

Improvement

• Add cyclonedxJSON1_6_VEX as output format for CycloneDX 1.6 with vulnerability information

5.2.8

Bugfix

• ignorefile cli argument was not working

5.2.7

Performance fix

• Upgrade to ASTronomical 2.0.0 to reduce memory usage

5.2.6

[5.2.6]

Bugfix

• Don't crash on invalid code when using deep scan

5.2.5

[5.2.5]

Bugfix

• CLI argument --ext was not working

4.4.4

[4.4.4]

Bugfix

• CLI argument --ext was not working

5.2.4

[5.2.4]

Bugfix

• Fix name vs group for scoped components in CycloneDX output

5.2.3

[5.2.3]

Bugfix

• Fix license handling for complex licenses

5.2.2

[5.2.2]

Bugfix

• Encode purls correctly in SBOM