CycloneDX for NPM states that it requires Node version 12. If I have an older project (for example an Angular 7 project) that only supports Node version 10. Can I run CycloneDX for NPM on the commandline as a docker container to generate an SBOM? Or must the project also support Node v12?
I have run the command against an older project and it seems to work, however I'm concerned that the generated SBOM might be incomplete or inaccurate due to the Node version. Updating the application to a newer version of Angular is possible as a long-term solution, however short-term I was wondering simply running the app in a container will work.