-
Notifications
You must be signed in to change notification settings - Fork 12
Open
Description
It would be really great if sbt-bom could integrate with sbt-assembly, so it'd accurately describe libraries included (or even shaded) into the artifact.
Currently the Maven CycloneDX plugin does not have this functionality either. Of course the BOM would have to make it really clear what the difference is between components that are a dependency of this component, and components that are embedded into this component. Likely the 'assembly' concept can be used for this, but AFAICS there are no conventions for this yet.
Metadata
Metadata
Assignees
Labels
No labels