feat: render property cdx:reproducible

[AradhyaTiwari10]

Adds a cdx:reproducible property under metadata.properties to indicate whether the SBOM was built in reproducible mode.
This fulfills issue #1054 (Hacktoberfest).
I tested it locally through:
npx cyclonedx-npm --output bom.json
Output was:

"properties": [
  {
    "name": "cdx:reproducible",
    "value": "false"
  }
]

Note: Some integration tests may fail due to snapshot mismatches from previous versions. The functionality itself works as expected.

[jkowalleck]

Note: Some integration tests may fail due to snapshot mismatches from previous versions. The functionality itself works as expected.

please create the snapshots as needed.
see https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/CONTRIBUTING.md
and

cyclonedx-node-npm/tests/integration/index.js

Line 50 in 0d02f67

const UPDATE_SNAPSHOTS = !!process.env.CNPM_TEST_UPDATE_SNAPSHOTS

[jkowalleck]

your PR does not follow our contribution guidelines.
see https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/CONTRIBUTING.md#sign-off-your-commits

here is how to fix this: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1373/checks?check_run_id=53847302694

[AradhyaTiwari10]

Thanks for the detailed feedback, @jkowalleck
I’ll address the requested changes right away:

I’ll remove the unintended bom.json file.

I’ll restore the src/builders.ts content that deletion was accidental.

I’ll re run the integration tests with CNPM_TEST_UPDATE_SNAPSHOTS=1 to regenerate snapshots as per the contribution guide.

I’ll also sign off my commits properly to pass the DCO check.

Once done, I’ll push the updates and request another review. Appreciate your guidance!

[AradhyaTiwari10]

Hey Kindly check now i have successfully Implemented the changes needed.

[AradhyaTiwari10]

@jkowalleck
Thanks a lot for the review and approval!
Just checking if there’s anything else needed from my side before it can be merged.

[jkowalleck]

thank you for the contribution.

[jkowalleck]

feature was released via https://github.com/CycloneDX/cyclonedx-node-npm/releases/tag/v4.1.0