This utility enhances an SPDX SBOM with transitive dependency information provided by other SBOMs.
Usage: transitive-sbom [options]
Options:
-v, --version Output the version
-h, --help Display help
-i, --input <sbom.spdx.json> Input SPDX json file
-o, --output <sbom.spdx.json> Output SPDX json file
-p, --path <glob-pattern> Supplemental SBOM search path
--mermaid Generate mermaid diagram
The mermaid option generates a mermaid "Mindmap" diagram of the package names.
mindmap
INFUSION
Windows Embedded Standard 7
Net Frame Work
Windows Embedded Standard 7 with SP1 patches
SQL 2005 Express
Java 8
Tomcat 9
Spring Framework
This can be processed by tools such as mermaid-cli into a diagram such as:
