An SBOM for every released artifact
Last modified by Vincent Massol on 2026/10/30 18:29
Every released artifact (except test modules) now comes with a CycloneDX SBOM (Software Bill of Materials), deployed next to it, which lists its dependencies. Extensions using a parent POM of at least 18.10.0 get one too. See Using Profiles for the details.
The parent POM now names its license with its SPDX identifier, LGPL-2.1-or-later. XWiki instances older than 18.10.0 may display it without the license text.
