cyclonedx-property-taxonomy

cdx:maven Namespace Taxonomy

This is the namespace for official CycloneDX properties related to the Maven ecosystem.

The official rules and processes apply - see parent document.


Namespace Description
cdx:maven:package Namespace for package specific properties.

Boolean value are true or false; case sensitive.

cdx:maven:package Namespace Taxonomy

Property Description
cdx:maven:package:test Whether the package is used only within test scope for Maven and test.* configurations for Gradle. Boolean value. If the property is missing, then assume the value to be false. May appear once.
cdx:maven:package:metadata-unresolved Why the package’s Maven metadata could not be obtained in full, so that a component whose metadata was unavailable is distinguishable from one that declares nothing. Value MUST be a single keyword listed in the section below. If the property is missing, then the metadata was read in full. May appear once.

Reasons for unresolved package metadata

These values MUST be used on the cdx:maven:package:metadata-unresolved property. A value MUST NOT claim a more specific cause than the evidence supports.

Value Description
pom-unresolved No usable POM artifact was obtained.
pom-unparseable A POM was obtained and could not be read.
parent-unresolved The POM was read, and the parent POM it declares was not obtained.
model-incomplete The effective model could not be built, and the failing input could not be identified.