📦 SBOM Diff Report
Generated by sbomlyze · 2026-11-02T03:07:22Z
SBOM Comparison
| Before | After |
|---|
| File | previous.cdx.json | current.cdx.json |
| File Size | 201 KB | 148 KB |
| Format | syft | syft |
| Components | 219 | 177 |
| PURL Coverage | 96.3% | 96.6% |
| License Coverage | 0.0% | 0.0% |
| Hash Coverage | 3.2% | 3.4% |
Key Findings
📉 Attack surface: -42 packages (-19.2%)
❌ cargo ecosystem entirely removed (40 → 0 packages)
❌ library ecosystem entirely removed (1 → 0 packages)
🔄 0 version changes among 177 shared packages — no actual upgrades
✅ Core system packages stable: golang (150), github (21) unchanged
➖ Removed Components (42)
| Name | Version | Type | License |
|---|
| functional-tests | 0.1.0 | unknown | — |
| bitflags | 2.6.0 | cargo | — |
| cfg-if | 1.0.0 | cargo | — |
| equivalent | 1.0.1 | cargo | — |
| errno | 0.3.10 | cargo | — |
| fastrand | 2.3.0 | cargo | — |
| getrandom | 0.3.1 | cargo | — |
| hashbrown | 0.14.3 | cargo | — |
| indexmap | 2.5.0 | cargo | — |
| itoa | 1.0.10 | cargo | — |
| lazy_static | 1.5.0 | cargo | — |
| libc | 0.2.182 | cargo | — |
| linux-raw-sys | 0.12.1 | cargo | — |
| memchr | 2.7.4 | cargo | — |
| once_cell | 1.20.2 | cargo | — |
| proc-macro2 | 1.0.107 | cargo | — |
| quote | 1.0.35 | cargo | — |
| rustix | 1.1.4 | cargo | — |
| ryu | 1.0.16 | cargo | — |
| serde | 1.0.229 | cargo | — |
| serde_core | 1.0.229 | cargo | — |
| serde_derive | 1.0.229 | cargo | — |
| serde_json | 1.0.151 | cargo | — |
| serde_yaml | 0.9.34+deprecated | cargo | — |
| syn | 3.0.2 | cargo | — |
| tempfile | 3.27.0 | cargo | — |
| unicode-ident | 1.0.12 | cargo | — |
| unsafe-libyaml | 0.2.11 | cargo | — |
| wasi | 0.13.3+wasi-0.2.2 | cargo | — |
| windows-sys | 0.59.0 | cargo | — |
| windows-targets | 0.52.6 | cargo | — |
| windows_aarch64_gnullvm | 0.52.6 | cargo | — |
| windows_aarch64_msvc | 0.52.6 | cargo | — |
| windows_i686_gnu | 0.52.6 | cargo | — |
| windows_i686_gnullvm | 0.52.6 | cargo | — |
| windows_i686_msvc | 0.52.6 | cargo | — |
| windows_x86_64_gnu | 0.52.6 | cargo | — |
| windows_x86_64_gnullvm | 0.52.6 | cargo | — |
| windows_x86_64_msvc | 0.52.6 | cargo | — |
| wit-bindgen-rt | 0.33.0 | cargo | — |
| zmij | 1.0.2 | cargo | — |
| /functional-tests/cargo.lock | | unknown | — |