News for hackers. Stuff that matters.
Re:The world needs a software bill of materials by perlgeek on Tuesday March 23, 2021 @06:33AM (#26553303)
It's currently only at the top-level package level, and so the data is simply taken from the package manager.

I want it to go one level deeper (we use dh-virtualenv to put several Python packages into one Debian package, but that's only done in a very small part of the company).

Of course then there could be C libraries packaged with the Python libraries packaged in a Debian repository, so we'd need another level eventually...

There are no comments on this comment yet.