Alternatives and similar repositories for univers:

Users that are interested in univers are comparing it to the libraries listed below

• package-url / packageurl-python
  Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…
  ☆72Updated 3 months ago
• scanoss / purl2cpe
  PURL to CPE Relationship mapping project.
  ☆82Updated this week
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆191Updated this week
• CycloneDX / cyclonedx-python-lib
  Python implementation of OWASP CycloneDX
  ☆74Updated this week
• aboutcode-org / purldb
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulner…
  ☆40Updated this week
• interlynk-io / sbomasm
  SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.
  ☆62Updated this week
• spdx / cdx2spdx
  Utility that converts SBOM documents from CycloneDX to SPDX
  ☆29Updated last year
• madpah / vexy
  Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents
  ☆19Updated 3 weeks ago
• aboutcode-org / license-expression
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX …
  ☆63Updated last month
• spdx / spdx-to-osv
  Produce an Open Source Vulnerability JSON file based on information in an SPDX document
  ☆63Updated 8 months ago
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆289Updated this week
• aboutcode-org / dejacode
  Automate open source license compliance and ensure software supply chain integrity
  ☆28Updated this week
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆83Updated last week
• ossf / sbom-everywhere
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
  ☆78Updated this week
• anthonyharrison / sbomdiff
  This tool compares two Software Bill of Materials (SBOMs) and reports the differences.
  ☆31Updated 3 months ago
• spdx / spdx-3-model
  The model for the information captured in SPDX version 3 standard.
  ☆75Updated this week
• CycloneDX / sbom-utility
  Utility that provides an API platform for validating, querying and managing BOM data
  ☆102Updated 2 months ago
• kissbom / kissbom-spec
  The Keep It Simple Software Bill of Material
  ☆11Updated 3 years ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆156Updated this week
• interlynk-io / sbomqs
  SBOM quality score - Quality metrics for your sboms
  ☆193Updated this week
• aboutcode-org / scancode.io
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored…
  ☆126Updated this week
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆104Updated last month
• DependencyTrack / hyades
  Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.
  ☆66Updated this week
• spdx / ntia-conformance-checker
  Check SPDX SBOM for NTIA minimum elements
  ☆59Updated last week
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆76Updated 2 months ago
• act-project / TAC
  Automating Compliance Tooling Project
  ☆20Updated 3 years ago
• aboutcode-org / container-inspector
  container-inspector is a suite of analysis utilities and command line tools for Docker container images, their layers and how these relat…
  ☆35Updated 6 months ago
• bomctl / bomctl
  Format agnostic SBOM tooling
  ☆97Updated this week
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆71Updated this week