Utility that converts SBOM documents from CycloneDX to SPDX
☆34Jan 19, 2024Updated 2 years ago
Alternatives and similar repositories for cdx2spdx
Users that are interested in cdx2spdx are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SBOM Explorer - Discover and pull public SBOMs☆21May 23, 2025Updated last year
- This tool compares two Software Bill of Materials (SBOMs) and reports the differences.☆45Mar 9, 2026Updated 4 months ago
- This is the GitHub repo of the OpenChain SBOM Study Group☆12Jun 24, 2026Updated last month
- SPDX Command Line Tools using the Spdx-Java-Library☆99Updated this week
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆20Updated this week
- PURL to CPE Relationship mapping project.☆123Updated this week
- ☆123Apr 15, 2025Updated last year
- A Python library to parse, validate and create SPDX documents.☆252Mar 13, 2026Updated 4 months ago
- Examples of SPDX files for software combinations☆150Jun 2, 2026Updated last month
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆89Updated this week
- Vulnerability Management with SBOM☆20Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆120Feb 28, 2026Updated 4 months ago
- Java library which implements the Java object model for SPDX and provides useful helper functions☆69Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The model for the information captured in SPDX version 3 standard.☆102Updated this week
- AES-GEM (AES Galois Extended Mode) implementation.☆14May 19, 2026Updated 2 months ago
- OSS License Simple Viewer is a simple Excel-based tool as OSS license reference for engineers.☆14Nov 20, 2020Updated 5 years ago
- CISA Known Exploited Vulnerabilities Catalog Enrichment☆19Jun 24, 2024Updated 2 years ago
- Decentralized Cyber Threat Intelligence Kaizen Framework☆27Jan 31, 2022Updated 4 years ago
- The Keep It Simple Software Bill of Material☆11Jan 31, 2022Updated 4 years ago
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆11Jul 10, 2026Updated 2 weeks ago
- Source for the website providing online SPDX tools☆71Jul 15, 2026Updated last week
- apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information☆25Feb 4, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository stores meetings minutes for the SPDX project☆43Updated this week
- A universal SBOM representation in protocol buffers☆326Updated this week
- OpenVEX Specification☆187Jan 16, 2026Updated 6 months ago
- The Disclosure-CLI provides an easy way to access the public api of the FOSS Disclosure Portal. It is the recommended tool for external s…☆19Apr 14, 2026Updated 3 months ago
- REUSE recommendations, tutorials, FAQ and specification☆19May 27, 2024Updated 2 years ago
- AlmaLinux OS SBOM data management utility.☆16Apr 2, 2026Updated 3 months ago
- A Yocto meta-layer for generating CycloneDX SBOMs and automatically uploading them to Dependency Track.☆22May 24, 2024Updated 2 years ago
- Using AI Agents for Audit SBOMs for OSS Compliance☆15Apr 7, 2025Updated last year
- Linux agent used to submit realtime SBOMs and dependency usage information to EdgeBit☆15Jan 24, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This is the OpenChain Telco Work Group☆20Jun 24, 2026Updated last month
- go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems☆14Sep 28, 2023Updated 2 years ago
- SPDX Merge tool☆51May 18, 2026Updated 2 months ago
- Support CI generation of SBOMs via golang tooling.☆427Jan 13, 2025Updated last year
- Generate a score for your sbom to understand if it will actually be useful.☆241Aug 13, 2024Updated last year
- Open source package corrections, policy rules and other configuration files for the OSS Review Toolkit.☆23Updated this week
- Privateer is a plugin-based framework for security & compliance evaluations.☆23Updated this week