Go · npm
CycloneDX/sbom-utility
Utility that provides an API platform for validating, querying and managing BOM data
Apache-2.0Oct 21, 2026 · metrics 2.10.0
All tags
Catalogue tag
#spdx
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
50 records
Go
git-pkgs/spdx
Go library for SPDX license expression parsing, normalization, and validation.
MITSep 19, 2026 · metrics 2.10.0
PyPI
dgeragh/license-audit
Analyze dependency licenses and get actionable licensing guidance for Python projects.
MITSep 10, 2026 · metrics 2.10.0
PyPI
espressif/esp-idf-sbom
ESP-IDF Software Bill of Materials Generation Tool
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
EmbarkStudios/spdx
🆔 Helper crate for SPDX expressions. 🦀
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
Vulnetix/cli
Automate vulnerability triage which prioritizes remediation over discovery
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
bact/licenseid
A Python CLI and library to get the SPDX License ID from license text
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
spdx/tools-python
A Python library to parse, validate and create SPDX documents.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
composer/spdx-licenses
Tools for working with the SPDX license list and validating licenses.
MITAug 27, 2026 · metrics 2.10.0
PyPI
aboutcode-org/license-expression
Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.
Custom licenseSep 9, 2026 · metrics 2.10.0
npm · PyPI
aiexponent/license-compliance-checker
License Compliance Checker — Multi-ecosystem license + AI model scanner for EU AI Act Article 53 GPAI compliance. SBOM, SARIF, training-data risk. Apache 2.0.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
NuGet
patriksvensson/covenant
A tool to generate SBOM (Software Bill of Material) from source code artifacts.
MITSep 15, 2026 · metrics 2.10.0
npm
sindresorhus/spdx-license-list
List of SPDX licenses
CC0-1.0Sep 16, 2026 · metrics 2.10.0
PyPI
PramanKasliwal/MaunPrekshak
The Silent Observer — Fast, local-first security scanner for dependencies (SCA), exposed secrets & git history, SAST, Dockerfiles, and GitHub Actions with multi-provider AI remediation.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
PyPI
MikeMoore63/spdx_matcher
No repository description published.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
jslicense/spdx-expression-parse.js
parse SPDX license expressions
MITSep 16, 2026 · metrics 2.10.0
crates.io
evenorog/license
Embedded license information from SPDX.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
jslicense/spdx-license-ids
a list of SPDX license identifiers
No licenseSep 16, 2026 · metrics 2.10.0
npm
electrovir/spdx-vir
No repository description published.
CC0-1.0Oct 21, 2026 · metrics 2.10.0
npm
jslicense/spdx-correct.js
correct invalid SPDX identifiers
Apache-2.0Sep 16, 2026 · metrics 2.10.0