OSV-SCALIBR: A library for Software Composition Analysis

1 Open Issue Need Help Last updated: Jul 10, 2025

Open Issues Need Help

View All on GitHub

AI Summary: Modify the OSV-SCALIBR library to store the CDX location (extracted path) as metadata instead of a top-level field. This involves changing how the `Location` field is handled, ensuring it reflects the location within the extracted file rather than the absolute file system path. The change should prevent appending the path to `ScanRoot` when `StoreAbsolutePath` is true.

Complexity: 4/5
bug good first issue

OSV-SCALIBR: A library for Software Composition Analysis

Go