PyPI
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Apache-2.0Sep 9, 2026 · metrics 2.10.0
All tags
Catalogue tag
#software-bill-of-materials
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
26 records
PyPI
CycloneDX/cyclonedx-python
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
microsoft/component-detection
Scans your project to determine what components you use
MITSep 11, 2026 · metrics 2.10.0
npm · PyPI
sbomify/sbomify
sbomify is a product security artifact hub and a trust center.
Custom licenseSep 19, 2026 · metrics 2.10.0
Maven
CycloneDX/cyclonedx-core-java
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
CycloneDX/cyclonedx-node-npm
Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
spdx/ntia-conformance-checker
Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
NuGet
CycloneDX/cyclonedx-dotnet
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
Apache-2.0Oct 11, 2026 · metrics 2.10.0
npm · PyPI
CycloneDX/cyclonedx-javascript-library
Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist · PyPI
CycloneDX/cyclonedx-php-library
Functionality and DataModels of OWASP CycloneDX for PHP
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
CycloneDX/cyclonedx-webpack-plugin
Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
janbiasi/rollup-plugin-sbom
Create SBOMs in CycloneDX format for your Vite, Rollup or Rolldown projects with ease
MITSep 9, 2026 · metrics 2.10.0
Go
CycloneDX/cyclonedx-gomod
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Packagist
CycloneDX/cyclonedx-php-composer
Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
CycloneDX/cyclonedx-go
Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
CycloneDX/cyclonedx-node-yarn
Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm · Go · PyPI
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Maven
CycloneDX/cyclonedx-maven-plugin
Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
CycloneDX/cyclonedx-esbuild
Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
CycloneDX/cyclonedx-node-module
creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects
Apache-2.0Sep 5, 2026 · metrics 2.10.0
—
CycloneDX/cyclonedx-cli
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
NuGet
CycloneDX/cyclonedx-dotnet-library
.NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go · npm
CycloneDX/sbom-utility
Utility that provides an API platform for validating, querying and managing BOM data
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
jrjsmrtn/ansible-bom
Inventory installed Ansible content — collections and roles — and emit a lockfile, drift report, and CycloneDX BOM
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
TomTonic/extract-sbom
Sandboxed SBOM extraction from arbitrary artifacts. Outputs traceability records and CycloneDX JSON for automation, auditability, and supply chain security.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0