Open
Description
When running cyclondedx v 2.1.0 on node 22 I get:
[INFO] Running 'npx @cyclonedx/cyclonedx-npm --mc-type library --output-file target/frontend.sbom.json' in /home/led/ws/inca1/vertigo/frontend
[INFO] (node:75084) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.
[INFO] (Use `node --trace-deprecation ...` to show where the warning was created)
The issue stems from this library using an outdated third-party dep, this is the dep tree;
├─┬ @cyclonedx/[email protected]
│ ├─┬ @cyclonedx/[email protected]
│ │ ├─┬ [email protected] <------ DEPRECATED
│ │ │ ├── [email protected] deduped
│ │ │ ├── [email protected]
│ │ │ ├─┬ [email protected]
│ │ │ │ └── [email protected]
│ │ │ ├─┬ [email protected]
│ │ │ │ └─┬ [email protected]
│ │ │ │ ├── [email protected]
│ │ │ │ ├── [email protected]
│ │ │ │ ├── [email protected]
│ │ │ │ └─┬ [email protected]
│ │ │ │ ├── [email protected]
│ │ │ │ └── [email protected]
│ │ │ └─┬ [email protected]
│ │ │ └── [email protected] deduped
│ │ ├─┬ [email protected]
│ │ │ └── [email protected] deduped
│ │ ├─┬ [email protected]
│ │ │ ├── [email protected] deduped
│ │ │ ├── [email protected]
│ │ │ ├── [email protected]
│ │ │ └── [email protected]
│ │ ├─┬ [email protected]
│ │ │ ├─┬ [email protected]
https://www.npmjs.com/package/ajv-formats-draft2019 is 4 years old and can be updated.
See also CycloneDX/cyclonedx-webpack-plugin#1348 that was closed