Expand description
Standards-based interchange output: SBOM (CycloneDX, SPDX), OSV and OpenVEX.
These let rustinel plug into the wider ecosystem and compliance tooling (e.g. EU Cyber Resilience Act / US EO 14028 SBOM requirements, osv.dev, code-scanning dashboards).
All builders are pure and deterministic: inputs are sorted, no randomness or
wall-clock is introduced here (timestamps flow in via the report), and every
string is emitted through serde_json, so untrusted package names/titles are
safely JSON-encoded with no injection surface.
Enums§
- Export
Format - Interchange formats understood by the
exportcommand.