The library is used in a single setter in the Component class:
|
public void setPurl(PackageURL purl) { |
|
this.purl = purl.canonicalize(); |
|
} |
Which is purely cosmetic and provides little value.
OTOH, it binds consumers of this library to a specific major version of packageurl-java.
We should keep our dependency footprint slim to only what's needed.
This would be a breaking change because the setter shown above is public.
The library is used in a single setter in the
Componentclass:cyclonedx-core-java/src/main/java/org/cyclonedx/model/Component.java
Lines 451 to 453 in d7dad57
Which is purely cosmetic and provides little value.
OTOH, it binds consumers of this library to a specific major version of
packageurl-java.We should keep our dependency footprint slim to only what's needed.
This would be a breaking change because the setter shown above is public.