Добавление нового экосистемного формата в cdxgen

★ 6.9 · engineering

ecosystem-onboarding is a Claude Code skill that guides developers through adding support for a new language, package manager, or lockfile/manifest format to cdxgen. It provides a full checklist: registering canonical types and aliases in `PROJECT_TYPE_ALIASES` (`lib/core/env.js`), placing parsers in `lib/ecosystems/utils.js`, implementing `create<Language>Bom` and wiring the dispatch branch in `lib/cli/index.js`, building purls exclusively via `tryBuildPurl`/`applyPurl`, handling hashes through `processHashes`, adding real-world fixtures under `test/`, writing poku-based tests, and updating docs (`docs/PROJECT_TYPES.md`, `docs/FEATURE_COVERAGE.md`). The skill also calls out conventions that commonly fail review: no imports from `lib/cli/index.js` inside parsers, using `safeSpawnSync`/`cdxgenAgent` instead of raw Node APIs, and registering any new `cdx:*` property in `docs/CUSTOM_PROPERTIES.md`. It targets cdxgen contributors extending ecosystem coverage or integrating new SBOM manifest formats.