ppkarwasz opened a new pull request, #828: URL: https://github.com/apache/commons-compress/pull/828
Compress is a good showcase for SBOMs being more useful than POMs for vulnerability management: they can capture dependencies across ecosystems. This PR adds the Meta Zstandard C library, compiled and embedded into zstd-jni, to the SBOM, so it covers vulnerabilities in both the JNI bindings and the native library. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
