All tags
Catalogue tag

#spdx

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

23 records
Tagged “spdx”Ranked by health index
Go
85Excellenthealth index
anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Go★ 9,262Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Go
85Excellenthealth index
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Go★ 570Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
Maven · npm
80Goodhealth index
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Kotlin★ 2,051Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
76Goodhealth index
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Python★ 113Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm · Maven · NuGet +1
76Goodhealth index
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
JavaScript★ 1,012↓ 719.2K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm
76Goodhealth index
janbiasi/rollup-plugin-sbom
Create SBOMs in CycloneDX format for your Vite, Rollup or Rolldown projects with ease
TypeScript★ 23↓ 177.5K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
75Goodhealth index
fsfe/reuse-tool
This is a mirror of https://codeberg.org/fsfe/reuse-tool
Python★ 583↓ 552.1K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
75Goodhealth index
kdeldycke/meta-package-manager
🎁 wraps all package managers with a unifying CLI
Python★ 609Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0
Maven · npm
72Goodhealth index
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Kotlin · TypeScript★ 66Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
PyPI
71Goodhealth index
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Python · C · Shell★ 2,583Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Go · PyPI
71Goodhealth index
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Go★ 9Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
67Moderatehealth index
rezmoss/sbomlyze
git diff for your SBOM ,compare CycloneDX/SPDX/Syft bills of materials, detect tampering, and gate CI
Go★ 24Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
66Moderatehealth index
aboutcode-org/license-expression
Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.
Python★ 73Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
PyPI
66Moderatehealth index
spdx/tools-python
A Python library to parse, validate and create SPDX documents.
Python★ 252Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Packagist
64Moderatehealth index
composer/spdx-licenses
Tools for working with the SPDX license list and validating licenses.
PHP★ 1,389↓ 3.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
63Moderatehealth index
spdx/spdx-tools-python
A Python library to parse, validate and create SPDX documents.
Python★ 251Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
PyPI
62Moderatehealth index
dgeragh/license-audit
Analyze dependency licenses and get actionable licensing guidance for Python projects.
Python★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
56Moderatehealth index
vulnetix/cli
Automate vulnerability triage which prioritizes remediation over discovery
Open Policy Agent · Go★ 25↓ 0/moJul 14, 2026
Custom licenseJul 14, 2026 · metrics 1.13.0
PyPI
55Moderatehealth index
MikeMoore63/spdx_matcher
No repository description published.
Python★ 4↓ 37.9K/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
CycloneDX/cyclonedx-python
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Python★ 386↓ 2.1M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
49At riskhealth index
jslicense/spdx-license-ids
a list of SPDX license identifiers
JavaScript★ 37↓ 190M/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
jslicense/spdx-correct.js
correct invalid SPDX identifiers
JavaScript★ 35↓ 155M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0