[TRACKING] CDX SBOM in `npm-cli`

[jkowalleck]

🔎 track the effort of integrating CycloneDX SBOM in npm-cli

• initial RFC: RFC: SBOM generation npm/rfcs#714
• possible implementation: feat: add npm sbom command npm/cli#6801
• released via:
  • v10.2.0
  • v9.9.0 (backport)

[jkowalleck]

Results of over a year tracking npm-cli's efforts, without going into details:

npm-cli's implementation is unmaintained and flawed ...
see https://github.com/search?q=repo%3Anpm%2Fcli+sbom&type=issues

In contrast, this very tool here stays maintained and accurate.