Functionality and DataModels of OWASP CycloneDX for Python
☆113Jul 18, 2026Updated this week
Alternatives and similar repositories for cyclonedx-python-lib
Users that are interested in cyclonedx-python-lib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆231Oct 21, 2025Updated 8 months ago
- apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information☆25Feb 4, 2022Updated 4 years ago
- Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…☆90Mar 11, 2026Updated 4 months ago
- A Python library to parse, validate and create SPDX documents.☆252Mar 13, 2026Updated 4 months ago
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆25Jan 19, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.☆137May 13, 2026Updated 2 months ago
- Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Sup…☆65Updated this week
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆525Updated this week
- Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX …☆73May 26, 2026Updated last month
- A universal SBOM representation in protocol buffers☆326Updated this week
- Report on quality of SBOM contents☆27Dec 18, 2024Updated last year
- sbomify is a product security artifact hub and a trust center.☆55Updated this week
- Repository for on-going work as part of the SBOM for AI Tiger Team effort.☆42Jul 28, 2025Updated 11 months ago
- Common weakness enumeration library for Python (maintained fork of https://github.com/Julian-Nash/cwe )☆15Aug 29, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Community Visual Studio Code extension for Sonatype IQ Server☆17Mar 26, 2025Updated last year
- Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects☆17May 21, 2026Updated 2 months ago
- AlmaLinux OS SBOM data management utility.☆16Apr 2, 2026Updated 3 months ago
- ☆20Nov 14, 2024Updated last year
- Python implementation of Stakeholder-Specific Vulnerability Categorization (SSVC)☆23Jul 10, 2026Updated last week
- Modular framework for file information extraction and dependency analysis to generate accurate SBOMs☆42Updated this week
- Utility that converts SBOM documents from CycloneDX to SPDX☆34Jan 19, 2024Updated 2 years ago
- A tool to create, transform and attest VEX metadata☆204Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆120Feb 28, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- OSS License Open Data☆12Jun 28, 2019Updated 7 years ago
- The Continuous Clearing Tool scans and collects third-party open-source components used in projects based on NPM, NuGet, Debian, Maven, P…☆31Updated this week
- Red team tool that emulates the SolarWinds CI compromise attack vector.☆24Mar 15, 2024Updated 2 years ago
- Enrich SBOMs with data from third party services☆231May 18, 2026Updated 2 months ago
- This repo contains license and copyright analysis results of open source packages. It further contains other license compliance relevant …☆54Updated this week
- Create SPDX documents automatically with CMake build info☆33May 2, 2021Updated 5 years ago
- A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/p…☆12Updated this week
- Library to ingest and generate VEX documents☆20Mar 9, 2026Updated 4 months ago
- The Keep It Simple Software Bill of Material☆11Jan 31, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Source for the website providing online SPDX tools☆71Updated this week
- creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects☆143Updated this week
- This repository stores meetings minutes for the SPDX project☆43Updated this week
- Software Component Verification Standard (SCVS)☆162Apr 1, 2025Updated last year
- A Python library and command-line utility that filters comments from a source file☆10Sep 8, 2025Updated 10 months ago
- Technical Advisory Council☆148Updated this week
- The team at Bosch were working on a mapping of SPDX and CycloneDX on both property level (= syntax) and a semantic interpretation of the …☆16Jan 26, 2026Updated 5 months ago