Re: Software Bill of Materials

2022-08-02 Thread Edward Stangler
The dependencies of the output of Royale are a concern, for licensing and security reasons. Angular automatically produces 3rdpartylicenses.txt to list dependencies, which is helpful. On 8/2/2022 11:50 AM, Tom DuBuisson wrote: > Andrew, > > You're right, SBOMs have gotten a lot of attention [1

Re: Using Playwright for RoyaleUnit JS testing

2022-08-02 Thread Josh Tynjala
I don't think that using Playwright gives us any improvement to build/test performance. It's still ultimately launching a separate browser process and communicating over a websocket. It's mainly stability improvements, for the reasons mentioned. Playwright is certainly be something that could be u

Re: Using Playwright for RoyaleUnit JS testing

2022-08-02 Thread Harbs
Cool. I was wondering what those references to Playwright were. A couple of questions: Does this bring any performance improvements? Does this make UI testing easier? > On Aug 2, 2022, at 8:50 PM, Josh Tynjala wrote: > > Hey all, > > Recently, I committed some changes to the RoyaleUnit Ant ta

Using Playwright for RoyaleUnit JS testing

2022-08-02 Thread Josh Tynjala
Hey all, Recently, I committed some changes to the RoyaleUnit Ant task to make it more robust and powerful. This is in response to my recent discovery that the RoyaleUnit testing in our royale-asjs build seems to have become less reliable over time since I originally set things up. In particular,

Re: Software Bill of Materials

2022-08-02 Thread Tom DuBuisson
Andrew, You're right, SBOMs have gotten a lot of attention [1]. While it appears vendors are going to be most on the hook to provide SBOMs, having the insights available at project and library level will be impacting library selection more and more. You can easily get bill of materials informatio

Re: Software Bill of Materials

2022-08-02 Thread Alex Harui
The compiler does have a supply chain, IMO. And some optional Flex modules for RemoteObject users also has a supply chain. -Alex On 8/2/22, 8:12 AM, "Harbs" wrote: EXTERNAL: Use caution when clicking on links or opening attachments. The lack of a supply chain for Royale is probably

Re: Software Bill of Materials

2022-08-02 Thread Harbs
The lack of a supply chain for Royale is probably a good selling point… ;-) > On Aug 2, 2022, at 4:26 PM, Andrew Wetmore wrote: > > Hi, all. > > I was reading today about SBOM [1] ('a kind of nutrition label to reduce > software supply chain risk') and wondered whether it would be very > diffi

Software Bill of Materials

2022-08-02 Thread Andrew Wetmore
Hi, all. I was reading today about SBOM [1] ('a kind of nutrition label to reduce software supply chain risk') and wondered whether it would be very difficult to add such a document to the Royale release assets. It seems to be an impending requirement (or 'desirement') for released software, and I