SBOM release notes

v3.1.0

Release date 1/14/2025

• Improve license detection.

• Better way to handle internal databases.

v3.0

Release date: 11/4/2024

• Detect vulnerability for binary C# files.

• Support more file types for the other programing languages.

• Improve Maven license detection.

• Improve engine initialization time.

• Improve JAR file detection.

v2.1

Release date: 8/28/2024

• Support SPDX and CycloneDX reports (requires MetaDefender Core V5.11.1+).

• Fix several issues when running multiple threads.

v2.0

Release date: 7/8/2024

• Support license risk detection (requires MetaDefender Core V5.10.1+).

• Improve the method to compare package versions.

v1.2.1

Release date: 4/15/2024

• Fix initialization failure in non-English environments.

v1.2

Release date: 4/1/2024

• Support recursive dependency checks for source code.

• Return CWE info.

• Detect vulnerabilities in version ranges.

• Fix detection issues in case of CRLF line endings.

v1.1.1

Release date: 1/9/2024

• Return fixed versions for CVEs.

• Support more file names: C/C++ package manager file (conan.lock)

• Add package detection forpom.properties and [package_name]-[package-version].jar.

v1.1

Release date: 12/06/2023

• Release Linux version

• Support log configuration

• Improve Node, Python detection

V1.0.6

Release date: 10/25/2023

• Improve processing speed.

• Enhance tar extraction to get layer ids properly.

V1.0

Release date: 10/9/2023

• SBOM engine for MetaDefender Core Windows

• Support source code and container scan

• Support 11 programming languages