Cannot generate BOM file about cyclonedx-node-module HOT 5 CLOSED

read-installed is used to retrieve information about the packages that are installed

from cyclonedx-node-module.

Could you please expand on this? Is this a CLI argument for cyclonedx-bom ? I'm basically trying generate BOM file having a project cloned on my filesystem.

from cyclonedx-node-module.

Information is read from the files installed into node_modules. So you need to run npm install first.

Or do you not know what is meant by npm install?

from cyclonedx-node-module.

Same issue here. I've run npm install ,and ./node_modules is full of packages. I'm also running cyclonedx-bom with -d to include dev packages, but I'm getting the same error w/ or w/o that arg.

I found that it was caused by not installing the cyclonedx-bom package globally (e.g. npm install -g @cyclonedx/bom). I was deliberately installing it locally so as not to pollute the system, and then using
npx @cyclonedx/bom cyclonedx-bom make-bom -d -o bom.xml
to execute the tool, but apparently it does not handle when run in that way.

I was able to make it work by directly accessing the bin via
./node_modules/@cyclonedx/bom/bin/cyclonedx-bom
rather than npx (which I'm possibly using incorrectly https://www.rockyourcode.com/run-locally-installed-npm-packages-without-global-install/)

It would be nice to avoid the requirement for global installation, or recommending in the help how to use it when locally installed, since modifying the system is not always possible or desirable.

from cyclonedx-node-module.

all questions answered.
input from @ddurham2 will be considered.

from cyclonedx-node-module.