SBOM release notes

v2.1

Release date: 8/28/2024

• Support SPDX and CycloneDX report (requires MetaDefender Core 5.11.1+).
• Fix several issues when running multiple threads.

v2.0

Release date: 7/8/2024

• Support license risk detection (requires MetaDefender Core 5.10.1+).
• Improve the method to compare package versions.

v1.2.1

Release date: 4/15/2024

• Fix the initialization failure in non English environment.

v1.2

Release date: 4/1/2024

• Support recursive dependency check for source code.
• Return CWE info.
• Detect vulnerabilities in version ranges.
• Fix detection issue in case CRLF line end.

v1.1.1

Release date: 1/9/2024

• Return fixed versions for the CVEs
• Support more file names: C/C++ package manager file (conan.lock)
• Add package detection for pom.properties, [package_name]-[package-version].jar

v1.1

Release date: 12/06/2023

• Release Linux version
• Support log configuration
• Improve Node, Python detection

V1.0.6

Release date: 10/25/2023

• Improve processing speed.
• Enhance tar extraction to get layer ids properly.

V1.0

Release date: 10/9/2023

• SBOM engine for MetaDefender Core Windows
• Support source code and container scan
• Support 11 programming languages