News for hackers. Stuff that matters.

A comment on Could lockfiles just be SBOMs?. Parent comment

Re:Could lockfiles just be SBOMs? by sunnyday_002 on Wednesday December 24, 2025 @06:19AM (#46374599)
So the lockfile is a superset, but never a subset?

So it basically is an SBOM then but just sometimes has extra dependencies?

[ Parent | on HN ]
Re:Could lockfiles just be SBOMs? by matharmin on Wednesday December 24, 2025 @06:21AM (#46374617)
Superset of dependencies, but often a subset of info per depedency.
[ Parent | on HN ]
Re:Could lockfiles just be SBOMs? by sunnyday_002 on Wednesday December 24, 2025 @06:24AM (#46374635)
Ah okay! I know Rust has the transitive dependencies did not think/realise all languages might not, good point!
[ Parent | on HN ]