CycloneDX / cyclonedx-webpack-plugin
Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
☆26Updated this week
Alternatives and similar repositories for cyclonedx-webpack-plugin:
Users that are interested in cyclonedx-webpack-plugin are comparing it to the libraries listed below
- creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects☆125Updated last week
- A BOM repository server for distributing CycloneDX BOMs☆75Updated 10 months ago
- SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.☆62Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆224Updated 5 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆68Updated last month
- Utility that provides an API and CLI to identify licenses and legal terms☆43Updated 7 months ago
- Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.☆78Updated this week
- Utility that provides an API platform for validating, querying and managing BOM data☆99Updated 2 months ago
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆32Updated this week
- Sunshine - SBOM visualization tool☆30Updated this week
- Check SPDX SBOM for NTIA minimum elements☆58Updated this week
- GitHub action to generate a CycloneDX SBOM for Node.js☆21Updated 3 weeks ago
- ☆113Updated 7 months ago
- Core functionality of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.☆15Updated last week
- ☆60Updated 6 months ago
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆190Updated last month
- SBOM Grep - search through SBOMs☆21Updated last month
- Software Component Verification Standard (SCVS)☆138Updated 9 months ago
- A documentation and tracking project with the goal of making package management systems more secure.☆50Updated 3 years ago
- Measure release insights and recommendations for open-source dependencies. Note: this project is archived.☆11Updated 2 years ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆70Updated 4 months ago
- Visualizer for GUAC☆27Updated last week
- Report missing advisories and corrections on OSS Index☆17Updated 2 years ago
- Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.☆66Updated this week
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆19Updated last week
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆62Updated 8 months ago
- SBOM quality score - Quality metrics for your sboms☆192Updated this week
- ☆23Updated 5 months ago
- ☆100Updated 4 months ago
- Audit Dependency-Track findings and policy violations via policy as code☆32Updated last week