PyPI
CycloneDX/cyclonedx-python
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Apache-2.027 ago 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#sbom-tool
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
14 registros
npm
RetireJS/retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Apache-2.021 sept 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-node-npm
Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
Apache-2.015 sept 2026 · métricas 2.10.0
PyPI
spdx/ntia-conformance-checker
Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
Apache-2.019 sept 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-webpack-plugin
Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
Apache-2.015 sept 2026 · métricas 2.10.0
Packagist
CycloneDX/cyclonedx-php-composer
Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
Apache-2.014 sept 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-node-yarn
Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.
Apache-2.015 sept 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-esbuild
Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.
Apache-2.015 sept 2026 · métricas 2.10.0
Go
rezmoss/sbomlyze
Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
Apache-2.012 sept 2026 · métricas 2.10.0
Go · npm
CycloneDX/sbom-utility
Utility that provides an API platform for validating, querying and managing BOM data
Apache-2.021 oct 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-node-module
creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects
Apache-2.021 oct 2026 · métricas 2.10.0
PyPI
bact/licenseid
A Python CLI and library to get the SPDX License ID from license text
Apache-2.019 oct 2026 · métricas 2.10.0
Go
aboutcode-org/purlvalidator-go
Offline Package URL validator using a prebuilt FST of known packages.
Apache-2.09 sept 2026 · métricas 2.10.0
PyPI
Innomatica-GmbH/embtrace-sbom
Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.
GPL-3.018 sept 2026 · métricas 2.10.0