SBOM release notes

v3.1.0

Release date 1/14/2025

• Improve license detection.
• Better way to handle internal databases.

v3.0

Release date: 11/4/2024

• Detect vulnerability for binary C# files.
• Support more file types for the other programing languages.
• Improve Maven license detection.
• Improve engine initialization time.
• Improve JAR file detection.

v2.1

Release date: 8/28/2024

• Support SPDX and CycloneDX reports (requires MetaDefender Core V5.11.1+).
• Fix several issues when running multiple threads.

v2.0

Release date: 7/8/2024

• Support license risk detection (requires MetaDefender Core V5.10.1+).
• Improve the method to compare package versions.

v1.2.1

Release date: 4/15/2024

• Fix initialization failure in non-English environments.

v1.2

Release date: 4/1/2024

• Support recursive dependency checks for source code.
• Return CWE info.
• Detect vulnerabilities in version ranges.
• Fix detection issues in case of CRLF line endings.

v1.1.1

Release date: 1/9/2024

• Return fixed versions for CVEs.
• Support more file names: C/C++ package manager file (conan.lock)
• Add package detection forpom.properties and [package_name]-[package-version].jar.

v1.1

Release date: 12/06/2023

• Release Linux version
• Support log configuration
• Improve Node, Python detection

V1.0.6

Release date: 10/25/2023

• Improve processing speed.
• Enhance tar extraction to get layer ids properly.

V1.0

Release date: 10/9/2023

• SBOM engine for MetaDefender Core Windows
• Support source code and container scan
• Support 11 programming languages