You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
cyclonedx-python (cyclonedx-bom==4.1.2) depends via cyclonedx-python-lib[validation]==6.4.3 on the package jsonschema, but with the special option format (jsonschema[format]).
This introduces the GPL dependency of package rfc3987, which I think is not the intention.
How to reproduce:
Install Python 3.10.11
In cmd call: pip install cyclonedx-bom
Prove:
Temporary user solution:
Downgrade cyclonedx-bom to a version without the dependency such as 3.11.7.
The text was updated successfully, but these errors were encountered:
cyclonedx-python (cyclonedx-bom==4.1.2) depends via cyclonedx-python-lib[validation]==6.4.3 on the package jsonschema, but with the special option format (jsonschema[format]).
This introduces the GPL dependency of package rfc3987, which I think is not the intention.
How to reproduce:
Prove:
Temporary user solution:
Downgrade cyclonedx-bom to a version without the dependency such as 3.11.7.
The text was updated successfully, but these errors were encountered: