Accessors for the three tables of an <sbom> object. Each returns its
data frame unchanged.
Usage
sbom_components(x)
sbom_dependencies(x)
sbom_issues(x)
# S3 method for class 'sbom'
print(x, ...)Arguments
- x
An
<sbom>object, as returned bysbom_package()orsbom_installed().- ...
Ignored.
Value
A data frame. sbom_components() has one row per component,
sbom_dependencies() one row per relationship (from, to, field,
spec, evidence), and sbom_issues() one row per recorded issue
(ref, field, severity, code, message).
A component's supplier (supplier_name, supplier_url) is the
repository it came from, such as CRAN, Bioconductor or Posit Package
Manager. For a package from GitHub, GitLab or Bitbucket, it is the
account that owns the repository, a user or an organization, with that
account's page as supplier_url, such as https://github.com/r-lib; the
repository itself is vcs_url. Without an owner on record, the supplier
is the forge, with no URL.
print.sbom() returns x invisibly.
Examples
x <- sbom_package(system.file("DESCRIPTION", package = "sbom"), system = FALSE)
sbom_components(x)
#> ref
#> 1 R
#> 2 R/methods
#> 3 R/utils
#> 4 local/sbom
#> 5 pkg:cran/cli@3.6.6?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 6 pkg:cran/curl@8.1.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 7 pkg:cran/htmltools@0.5.9?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 8 pkg:cran/jsonlite@2.0.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 9 pkg:cran/jsonvalidate@1.5.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 10 pkg:cran/knitr@1.52?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 11 pkg:cran/pak@0.11.2?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 12 pkg:cran/quarto@1.5.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 13 pkg:cran/renv@1.3.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 14 pkg:cran/rlang@1.3.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 15 pkg:cran/rmarkdown@2.32?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 16 pkg:cran/testthat@3.3.2?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 17 pkg:cran/withr@3.0.3?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 18 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 19 pkg:cran/yaml@2.3.12?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> name version version_is type ecosystem is_root scope
#> 1 R 4.6.2 exact platform r FALSE required
#> 2 methods 4.6.2 exact library base-r FALSE required
#> 3 utils 4.6.2 exact library base-r FALSE required
#> 4 sbom 0.1.0 exact library local TRUE required
#> 5 cli 3.6.6 exact library repository FALSE required
#> 6 curl 8.1.0 exact library repository FALSE optional
#> 7 htmltools 0.5.9 exact library repository FALSE optional
#> 8 jsonlite 2.0.0 exact library repository FALSE required
#> 9 jsonvalidate 1.5.0 exact library repository FALSE optional
#> 10 knitr 1.52 exact library repository FALSE optional
#> 11 pak 0.11.2 exact library repository FALSE optional
#> 12 quarto 1.5.1 exact library repository FALSE optional
#> 13 renv 1.3.1 exact library repository FALSE required
#> 14 rlang 1.3.0 exact library repository FALSE required
#> 15 rmarkdown 2.32 exact library repository FALSE optional
#> 16 testthat 3.3.2 exact library repository FALSE optional
#> 17 withr 3.0.3 exact library repository FALSE optional
#> 18 xml2 1.6.0 exact library repository FALSE required
#> 19 yaml 2.3.12 exact library repository FALSE optional
#> parent_ref
#> 1 <NA>
#> 2 R
#> 3 R
#> 4 <NA>
#> 5 <NA>
#> 6 <NA>
#> 7 <NA>
#> 8 <NA>
#> 9 <NA>
#> 10 <NA>
#> 11 <NA>
#> 12 <NA>
#> 13 <NA>
#> 14 <NA>
#> 15 <NA>
#> 16 <NA>
#> 17 <NA>
#> 18 <NA>
#> 19 <NA>
#> purl
#> 1 <NA>
#> 2 <NA>
#> 3 <NA>
#> 4 <NA>
#> 5 pkg:cran/cli@3.6.6?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 6 pkg:cran/curl@8.1.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 7 pkg:cran/htmltools@0.5.9?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 8 pkg:cran/jsonlite@2.0.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 9 pkg:cran/jsonvalidate@1.5.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 10 pkg:cran/knitr@1.52?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 11 pkg:cran/pak@0.11.2?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 12 pkg:cran/quarto@1.5.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 13 pkg:cran/renv@1.3.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 14 pkg:cran/rlang@1.3.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 15 pkg:cran/rmarkdown@2.32?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 16 pkg:cran/testthat@3.3.2?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 17 pkg:cran/withr@3.0.3?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 18 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 19 pkg:cran/yaml@2.3.12?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> supplier_name
#> 1 <NA>
#> 2 <NA>
#> 3 <NA>
#> 4 <NA>
#> 5 Posit Package Manager
#> 6 Posit Package Manager
#> 7 Posit Package Manager
#> 8 Posit Package Manager
#> 9 Posit Package Manager
#> 10 Posit Package Manager
#> 11 Posit Package Manager
#> 12 Posit Package Manager
#> 13 Posit Package Manager
#> 14 Posit Package Manager
#> 15 Posit Package Manager
#> 16 Posit Package Manager
#> 17 Posit Package Manager
#> 18 Posit Package Manager
#> 19 Posit Package Manager
#> supplier_url
#> 1 <NA>
#> 2 <NA>
#> 3 <NA>
#> 4 <NA>
#> 5 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 6 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 7 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 8 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 9 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 10 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 11 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 12 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 13 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 14 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 15 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 16 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 17 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 18 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 19 https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> maintainer license_as_written
#> 1 <NA> GPL-2 | GPL-3
#> 2 <NA> <NA>
#> 3 <NA> <NA>
#> 4 James Joseph Balamuta MIT + file LICENSE
#> 5 Gábor Csárdi MIT + file LICENSE
#> 6 Jeroen Ooms MIT + file LICENSE
#> 7 Carson Sievert GPL (>= 2)
#> 8 Jeroen Ooms MIT + file LICENSE
#> 9 Rich FitzJohn MIT + file LICENSE
#> 10 Yihui Xie GPL
#> 11 Gábor Csárdi GPL-3
#> 12 Christophe Dervieux MIT + file LICENSE
#> 13 Kevin Ushey MIT + file LICENSE
#> 14 Lionel Henry MIT + file LICENSE
#> 15 Yihui Xie MIT + file LICENSE
#> 16 Hadley Wickham MIT + file LICENSE
#> 17 Lionel Henry MIT + file LICENSE
#> 18 Jeroen Ooms MIT + file LICENSE
#> 19 Hadley Wickham BSD_3_clause + file LICENSE
#> license_spdx
#> 1 GPL-2.0-only OR GPL-3.0-only
#> 2 <NA>
#> 3 <NA>
#> 4 MIT
#> 5 MIT
#> 6 MIT
#> 7 GPL-2.0-only OR GPL-3.0-only
#> 8 MIT
#> 9 MIT
#> 10 GPL-2.0-only OR GPL-3.0-only
#> 11 GPL-3.0-only
#> 12 MIT
#> 13 MIT
#> 14 MIT
#> 15 MIT
#> 16 MIT
#> 17 MIT
#> 18 MIT
#> 19 BSD-3-Clause
#> license_comment published
#> 1 Declared in DESCRIPTION as GPL-2 | GPL-3. <NA>
#> 2 Part of R, under R's own license. <NA>
#> 3 Part of R, under R's own license. <NA>
#> 4 Declared in DESCRIPTION as MIT + file LICENSE. <NA>
#> 5 Declared in DESCRIPTION as MIT + file LICENSE. 2026-04-09
#> 6 Declared in DESCRIPTION as MIT + file LICENSE. 2026-10-14
#> 7 Declared in DESCRIPTION as GPL (>= 2). 2025-12-04
#> 8 Declared in DESCRIPTION as MIT + file LICENSE. 2025-03-27
#> 9 Declared in DESCRIPTION as MIT + file LICENSE. 2025-02-07
#> 10 Declared in DESCRIPTION as GPL. 2026-09-06
#> 11 Declared in DESCRIPTION as GPL-3. 2026-11-07
#> 12 Declared in DESCRIPTION as MIT + file LICENSE. 2025-09-04
#> 13 Declared in DESCRIPTION as MIT + file LICENSE. 2026-10-06
#> 14 Declared in DESCRIPTION as MIT + file LICENSE. 2026-07-05
#> 15 Declared in DESCRIPTION as MIT + file LICENSE. 2026-09-01
#> 16 Declared in DESCRIPTION as MIT + file LICENSE. 2026-01-11
#> 17 Declared in DESCRIPTION as MIT + file LICENSE. 2026-06-19
#> 18 Declared in DESCRIPTION as MIT + file LICENSE. 2026-06-22
#> 19 Declared in DESCRIPTION as BSD_3_clause + file LICENSE. 2025-12-10
#> homepage vcs_url
#> 1 https://www.r-project.org <NA>
#> 2 <NA> <NA>
#> 3 <NA> <NA>
#> 4 <NA> https://github.com/coatless-rpkg/sbom
#> 5 <NA> https://github.com/r-lib/cli
#> 6 <NA> https://github.com/jeroen/curl
#> 7 <NA> https://github.com/rstudio/htmltools
#> 8 <NA> https://github.com/jeroen/jsonlite
#> 9 <NA> https://github.com/ropensci/jsonvalidate
#> 10 <NA> https://github.com/yihui/knitr
#> 11 <NA> https://github.com/r-lib/pak
#> 12 <NA> https://github.com/quarto-dev/quarto-r
#> 13 <NA> https://github.com/rstudio/renv
#> 14 <NA> https://github.com/r-lib/rlang
#> 15 <NA> https://github.com/rstudio/rmarkdown
#> 16 <NA> https://github.com/r-lib/testthat
#> 17 <NA> https://github.com/r-lib/withr
#> 18 <NA> https://github.com/r-lib/xml2
#> 19 <NA> https://github.com/r-lib/yaml
#> download_location package_file_name doi
#> 1 <NA> <NA> <NA>
#> 2 <NA> <NA> <NA>
#> 3 <NA> <NA> <NA>
#> 4 <NA> <NA> <NA>
#> 5 <NA> cli_3.6.6.tar.gz <NA>
#> 6 <NA> curl_8.1.0.tar.gz <NA>
#> 7 <NA> htmltools_0.5.9.tar.gz <NA>
#> 8 <NA> jsonlite_2.0.0.tar.gz <NA>
#> 9 <NA> jsonvalidate_1.5.0.tar.gz <NA>
#> 10 <NA> knitr_1.52.tar.gz <NA>
#> 11 <NA> pak_0.11.2.tar.gz <NA>
#> 12 <NA> quarto_1.5.1.tar.gz <NA>
#> 13 <NA> renv_1.3.1.tar.gz <NA>
#> 14 <NA> rlang_1.3.0.tar.gz <NA>
#> 15 <NA> rmarkdown_2.32.tar.gz <NA>
#> 16 <NA> testthat_3.3.2.tar.gz <NA>
#> 17 <NA> withr_3.0.3.tar.gz <NA>
#> 18 <NA> xml2_1.6.0.tar.gz <NA>
#> 19 <NA> yaml_2.3.12.tar.gz <NA>
#> description bioc_release evidence
#> 1 <NA> <NA> observed
#> 2 Part of R. It comes with R and has no file of its own. <NA> observed
#> 3 Part of R. It comes with R and has no file of its own. <NA> observed
#> 4 <NA> <NA> declared
#> 5 <NA> <NA> observed
#> 6 <NA> <NA> observed
#> 7 <NA> <NA> observed
#> 8 <NA> <NA> observed
#> 9 <NA> <NA> observed
#> 10 <NA> <NA> observed
#> 11 <NA> <NA> observed
#> 12 <NA> <NA> observed
#> 13 <NA> <NA> observed
#> 14 <NA> <NA> observed
#> 15 <NA> <NA> observed
#> 16 <NA> <NA> observed
#> 17 <NA> <NA> observed
#> 18 <NA> <NA> observed
#> 19 <NA> <NA> observed
#> source_input system_requirements deps_known hashes
#> 1 r <NA> TRUE
#> 2 r <NA> TRUE
#> 3 r <NA> TRUE
#> 4 package <NA> TRUE
#> 5 library <NA> TRUE
#> 6 library <NA> TRUE
#> 7 library <NA> TRUE
#> 8 library <NA> TRUE
#> 9 library <NA> TRUE
#> 10 library <NA> TRUE
#> 11 library <NA> TRUE
#> 12 library <NA> TRUE
#> 13 library <NA> TRUE
#> 14 library <NA> TRUE
#> 15 library <NA> TRUE
#> 16 library <NA> TRUE
#> 17 library <NA> TRUE
#> 18 library <NA> TRUE
#> 19 library <NA> TRUE
#> deps
#> 1
#> 2
#> 3
#> 4 Depends, Imports, Imports, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 4.5.0), cli (>= 3.6.6), jsonlite (>= 2.0.0), renv (>= 1.3.1), utils, xml2 (>= 1.6.0), curl (>= 8.1.0), htmltools (>= 0.5.9), jsonvalidate (>= 1.5.0), knitr (>= 1.52), pak (>= 0.11.1), quarto (>= 1.5.1), rmarkdown (>= 2.32), testthat (>= 3.3.2), withr (>= 3.0.3), yaml (>= 2.3.12)
#> 5 Depends, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.4), utils, callr, covr, crayon, digest, glue (>= 1.6.0), grDevices, htmltools, htmlwidgets, knitr, methods, processx, ps (>= 1.3.4.9000), rlang (>= 1.0.2.9003), rmarkdown, rprojroot, rstudioapi, testthat (>= 3.2.0), tibble, whoami, withr
#> 6 Depends, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.0.0), spelling, testthat (>= 1.0.0), knitr, jsonlite, later, rmarkdown, httpuv (>= 1.4.4), webutils
#> 7 Depends, Imports, Imports, Imports, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 2.14.1), base64enc, digest, fastmap (>= 1.1.0), grDevices, rlang (>= 1.0.0), utils, Cairo, markdown, ragg, shiny, testthat, withr
#> 8 Depends, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, methods, httr, vctrs, testthat, knitr, rmarkdown, R.rsp, sf
#> 9 Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, R6, V8, knitr, jsonlite, rmarkdown, testthat, withr
#> 10 Depends, Imports, Imports, Imports, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.6.0), evaluate (>= 0.15), highr (>= 0.11), methods, tools, xfun (>= 0.52), yaml (>= 2.1.19), bslib, DBI (>= 0.4-1), digest, formatR, gifski, gridSVG, htmlwidgets (>= 0.7), jpeg, JuliaCall (>= 0.11.1), magick, litedown (>= 0.10), otel, otelsdk, png, ragg (>= 1.5.0), reticulate (>= 1.4), rgl (>= 0.95.1201), rlang, rmarkdown, sass, showtext, styler (>= 1.2.0), targets (>= 0.6.0), testit, tibble, tikzDevice (>= 0.10), tinytex (>= 0.56), webshot, rstudioapi, svglite
#> 11 Depends, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.5), tools, utils, callr (>= 3.7.0), cli (>= 3.2.0), covr, curl (>= 4.3.2), desc (>= 1.4.1), filelock (>= 1.0.2), gitcreds, glue (>= 1.6.2), jsonlite (>= 1.8.0), keyring (>= 1.4.0), pingr, pkgbuild (>= 1.4.2), pkgcache (>= 2.2.4), pkgdepends (>= 0.9.0), pkgload, pkgsearch (>= 3.1.0), processx (>= 3.8.1), ps (>= 1.6.0), rstudioapi, testthat (>= 3.2.0), webfakes, withr, yaml
#> 12 Depends, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 4.1.0), cli, fs, htmltools, jsonlite, later, lifecycle, processx, rlang, rmarkdown, rstudioapi, tools, utils, xfun, yaml (>= 2.3.10), bslib, callr, curl, dplyr, flextable, ggiraph, ggplot2, gt, heatmaply, kableExtra, knitr, palmerpenguins, patchwork, pkgload, plotly, rsconnect (>= 0.8.26), testthat (>= 3.1.7), thematic, tidyverse, tinytable, whoami, withr
#> 13 Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, utils, BiocManager, cli, compiler, covr, cpp11, curl, devtools, generics, gitcreds, jsonlite, jsonvalidate, knitr, miniUI, modules, packrat, pak, pkgload, R6, remotes, reticulate, rmarkdown, rstudioapi, shiny, testthat, uuid, waldo, yaml, webfakes
#> 14 Depends, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 4.0.0), utils, cli (>= 3.1.0), covr, crayon, desc, fs, glue, knitr, magrittr, methods, pillar, pkgload, rmarkdown, stats, testthat (>= 3.3.2), tibble, usethis, vctrs (>= 0.2.3), withr
#> 15 Depends, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.0), bslib (>= 0.2.5.1), evaluate (>= 0.13), fontawesome (>= 0.5.0), htmltools (>= 0.5.1), jquerylib, jsonlite, knitr (>= 1.50), methods, tinytex (>= 0.31), tools, utils, xfun (>= 0.36), yaml (>= 2.1.19), digest, dygraphs, fs, rsconnect, downlit (>= 0.4.0), katex (>= 1.4.0), sass (>= 0.4.0), shiny (>= 1.6.0), testthat (>= 3.0.3), tibble, vctrs, cleanrmd, withr (>= 2.4.2), xml2
#> 16 Depends, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 4.1.0), brio (>= 1.1.5), callr (>= 3.7.6), cli (>= 3.6.5), desc (>= 1.4.3), evaluate (>= 1.0.4), jsonlite (>= 2.0.0), lifecycle (>= 1.0.4), magrittr (>= 2.0.3), methods, pkgload (>= 1.4.0), praise (>= 1.0.0), processx (>= 3.8.6), ps (>= 1.9.1), R6 (>= 2.6.1), rlang (>= 1.1.6), utils, waldo (>= 0.6.2), withr (>= 3.0.2), covr, curl (>= 0.9.5), diffviewer (>= 0.1.0), digest (>= 0.6.33), gh, knitr, otel, otelsdk, rmarkdown, rstudioapi, S7, shiny, usethis, vctrs (>= 0.1.0), xml2
#> 17 Depends, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.6.0), graphics, grDevices, callr, DBI, knitr, methods, rlang, rmarkdown (>= 2.12), RSQLite, testthat (>= 3.0.0)
#> 18 Depends, Imports, Imports, Imports, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, Suggests, R (>= 3.6.0), cli, methods, rlang (>= 1.1.0), covr, curl, httr, knitr, mockery, rmarkdown, testthat (>= 3.2.0), xslt
#> 19 Suggests, Suggests, Suggests, knitr, rmarkdown, testthat (>= 3.0.0)
#> asserted
#> 1
#> 2
#> 3
#> 4
#> 5
#> 6
#> 7
#> 8
#> 9
#> 10
#> 11
#> 12
#> 13
#> 14
#> 15
#> 16
#> 17
#> 18
#> 19
sbom_dependencies(x)
#> from
#> 1 R
#> 2 R
#> 3 local/sbom
#> 4 local/sbom
#> 5 local/sbom
#> 6 local/sbom
#> 7 local/sbom
#> 8 local/sbom
#> 9 local/sbom
#> 10 local/sbom
#> 11 local/sbom
#> 12 local/sbom
#> 13 local/sbom
#> 14 local/sbom
#> 15 local/sbom
#> 16 local/sbom
#> 17 local/sbom
#> 18 local/sbom
#> 19 pkg:cran/cli@3.6.6?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 20 pkg:cran/cli@3.6.6?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 21 pkg:cran/jsonlite@2.0.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 22 pkg:cran/renv@1.3.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 23 pkg:cran/rlang@1.3.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 24 pkg:cran/rlang@1.3.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 25 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 26 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 27 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 28 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> to
#> 1 R/methods
#> 2 R/utils
#> 3 R
#> 4 R/utils
#> 5 pkg:cran/cli@3.6.6?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 6 pkg:cran/curl@8.1.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 7 pkg:cran/htmltools@0.5.9?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 8 pkg:cran/jsonlite@2.0.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 9 pkg:cran/jsonvalidate@1.5.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 10 pkg:cran/knitr@1.52?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 11 pkg:cran/pak@0.11.2?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 12 pkg:cran/quarto@1.5.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 13 pkg:cran/renv@1.3.1?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 14 pkg:cran/rmarkdown@2.32?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 15 pkg:cran/testthat@3.3.2?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 16 pkg:cran/withr@3.0.3?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 17 pkg:cran/xml2@1.6.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 18 pkg:cran/yaml@2.3.12?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 19 R
#> 20 R/utils
#> 21 R/methods
#> 22 R/utils
#> 23 R
#> 24 R/utils
#> 25 R
#> 26 R/methods
#> 27 pkg:cran/cli@3.6.6?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> 28 pkg:cran/rlang@1.3.0?repository_url=https://packagemanager.posit.co/cran/__linux__/resolute/latest
#> field spec evidence
#> 1 contains <NA> inferred
#> 2 contains <NA> inferred
#> 3 Depends R (>= 4.5.0) declared
#> 4 Imports utils declared
#> 5 Imports cli (>= 3.6.6) declared
#> 6 Suggests curl (>= 8.1.0) declared
#> 7 Suggests htmltools (>= 0.5.9) declared
#> 8 Imports jsonlite (>= 2.0.0) declared
#> 9 Suggests jsonvalidate (>= 1.5.0) declared
#> 10 Suggests knitr (>= 1.52) declared
#> 11 Suggests pak (>= 0.11.1) declared
#> 12 Suggests quarto (>= 1.5.1) declared
#> 13 Imports renv (>= 1.3.1) declared
#> 14 Suggests rmarkdown (>= 2.32) declared
#> 15 Suggests testthat (>= 3.3.2) declared
#> 16 Suggests withr (>= 3.0.3) declared
#> 17 Imports xml2 (>= 1.6.0) declared
#> 18 Suggests yaml (>= 2.3.12) declared
#> 19 Depends R (>= 3.4) declared
#> 20 Imports utils declared
#> 21 Depends methods declared
#> 22 Imports utils declared
#> 23 Depends R (>= 4.0.0) declared
#> 24 Imports utils declared
#> 25 Depends R (>= 3.6.0) declared
#> 26 Imports methods declared
#> 27 Imports cli declared
#> 28 Imports rlang (>= 1.1.0) declared
sbom_issues(x)
#> ref field severity code
#> 1 local/sbom supplier warning supplier-unknown
#> 2 local/sbom embedded info compiled-code-limited
#> 3 local/sbom author info no-sbom-author
#> message
#> 1 sbom 0.1.0 was installed from a local source, so it has no supplier on record.
#> 2 10 packages contain compiled code, but sbom recognized no bundled library in their COPYRIGHTS file or cph entries, so it could not look inside them: cli 3.6.6, curl 8.1.0, htmltools 0.5.9, jsonlite 2.0.0, pak 0.11.2, renv 1.3.1, rlang 1.3.0, testthat 3.3.2, xml2 1.6.0, yaml 2.3.12.
#> 3 No author or organization was given for this SBOM, so only the tool that made it is recorded.