#package-url

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

Functionality and DataModels of OWASP CycloneDX for PHP

🎁 snapshot every package on your machine to one file, restore it on a new one

Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Implementation of the purl (package url) specification.

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.

.NET parser for Package URLs (ECMA-427)

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

A Go library for fetching package metadata from multiple sources

Go library for working with Package URLs (PURLs).

Go library for fetching vulnerability data from multiple sources

Utility that provides an API platform for validating, querying and managing BOM data

A Go library for parsing, comparing and sorting version ranges according to the VERS spec.