Alternatives and similar repositories for vulnerability-db

Users that are interested in vulnerability-db are comparing it to the libraries listed below

• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆133Updated last year
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆203Updated this week
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆308Updated this week
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆146Updated 11 months ago
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆93Updated 3 months ago
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆81Updated 9 months ago
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆49Updated 2 years ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆200Updated last week
• cve-search / cpe-guesser
  Tool to guess CPE name based on common software name
  ☆95Updated 5 months ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆142Updated last year
• jgamblin / cve.icu
  CVE.ICU code.
  ☆42Updated this week
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated 2 weeks ago
• SecureStackCo / visualizing-software-supply-chain
  A project to visualize the software supply chain
  ☆50Updated last year
• CloudSecurityAlliance / gsd-database
  Global Security Database
  ☆318Updated last year
• AppThreat / atom
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆65Updated this week
• Vulnogram / Vulnogram
  Vulnogram is a tool for creating and editing CVE information in CVE JSON format
  ☆185Updated last week
• fkie-cad / nvd-json-data-feeds
  Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endo…
  ☆156Updated this week
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆94Updated this week
• FIRSTdotorg / cvss-v4-calculator
  CVSS v4.0 calculator
  ☆31Updated 8 months ago
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆193Updated last month
• RedHatProductSecurity / cvelib
  A Python library and command line interface for CVE Services.
  ☆65Updated last month
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆20Updated last year
• nccgroup / ccs
  ☆110Updated last year
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆144Updated last month
• anchore / nvd-data-overrides
  ☆47Updated this week
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆93Updated last year
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆117Updated 2 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆124Updated last month
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆194Updated last week