Alternatives and similar repositories for cyclonedx-node-npm:

Users that are interested in cyclonedx-node-npm are comparing it to the libraries listed below

• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆127Updated 3 months ago
• CycloneDX / cyclonedx-javascript-library
  Core functionality of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
  ☆16Updated this week
• CycloneDX / gh-node-module-generatebom
  GitHub action to generate a CycloneDX SBOM for Node.js
  ☆21Updated 3 months ago
• HansHammel / license-compatibility-checker
  Check npm dependencies' package.json for license compatibility (aka compliance check) with the current project based on spdx notation and…
  ☆95Updated last year
• CycloneDX / cyclonedx-webpack-plugin
  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
  ☆26Updated this week
• ossf / package-manager-best-practices
  Collection of security best practices for package managers.
  ☆162Updated 2 years ago
• CycloneDX / cyclonedx-node-yarn
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.
  ☆22Updated this week
• security-alert / security-alert
  [GitHub] A Command Line ToolKit for GitHub Security Alert.
  ☆27Updated 5 months ago
• RSeidelsohn / license-checker-rseidelsohn
  Extract NPM package licenses. Enhanced and updated fork of Dav Glass' original (but abandoned) license-checker.
  ☆157Updated 2 weeks ago
• CycloneDX / cyclonedx-bom-repo-server
  A BOM repository server for distributing CycloneDX BOMs
  ☆77Updated last year
• janbiasi / rollup-plugin-sbom
  Create SBOMs in CycloneDX format for your Vite or Rollup projects with ease
  ☆11Updated 2 weeks ago
• jeemok / better-npm-audit
  The goal of this project is to provide additional features on top of the existing npm audit options
  ☆123Updated 8 months ago
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆354Updated 5 months ago
• ossf / scorecard-monitor
  Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
  ☆34Updated 2 months ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆171Updated last month
• CycloneDX / specification
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…
  ☆396Updated this week
• webschik / tslint-config-security
  TSLint security rules
  ☆69Updated 4 years ago
• jeremylong / open-vulnerability-cli
  A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…
  ☆145Updated this week
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆296Updated this week
• microsoft / eslint-plugin-sdl
  ESLint Plugin focused on common security issues and misconfigurations.
  ☆40Updated 2 months ago
• spdx / spdx-online-tools
  Source for the website providing online SPDX tools
  ☆67Updated last month
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆564Updated last month
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆229Updated 8 months ago
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆28Updated 11 months ago
• sonatype-nexus-community / auditjs
  Audits an NPM package.json file to identify known vulnerabilities.
  ☆227Updated 5 months ago
• semrel-extra / zx-semrel
  `zx`-based release script as `semantic-release` alternative (PoC)
  ☆58Updated 5 months ago
• atlassian-labs / json-schema-viewer
  A JSON Schema Viewer for any JSON Schema on earth.
  ☆150Updated 3 weeks ago
• SocketDev / socket-cli
  The Socket CLI
  ☆133Updated last week
• CycloneDX / Sunshine
  Sunshine - SBOM visualization tool
  ☆43Updated last month
• snyk / vulncost
  Find security vulnerabilities in open source npm packages while you code
  ☆205Updated 3 years ago