Catalogue tag

#spdx-sbom

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

4 records

Tagged “spdx-sbom”Ranked by health index

95Exceptionalhealth index

guacsec/guac

GUAC aggregates software security metadata into a high fidelity graph database.

Go★ 1,557Oct 19, 2026

Apache-2.0Oct 19, 2026 · metrics 2.10.0

npm · Maven · NuGet +1

91Excellenthealth index

cdxgen/cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

JavaScript★ 1,067↓ 2,406/moSep 14, 2026

Apache-2.0Sep 14, 2026 · metrics 2.10.0

Go · npm

80Excellenthealth index

CycloneDX/sbom-utility

Utility that provides an API platform for validating, querying and managing BOM data

Go · TypeScript★ 168Oct 21, 2026

Apache-2.0Oct 21, 2026 · metrics 2.10.0

crates.io

71Goodhealth index

scm-rs/csaf-walker

A library and CLI to work with CSAF and SBOM data

Rust★ 13↓ 11K/moSep 18, 2026

Apache-2.0Sep 18, 2026 · metrics 2.10.0