Examples of SPDX files for software combinations
☆156Sep 29, 2026Updated last week
Alternatives and similar repositories for spdx-examples
Users that are interested in spdx-examples are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The model for the information captured in SPDX version 3 standard.☆105Sep 29, 2026Updated last week
- The System Package Data Exchange (SPDX) specification in Markdown and HTML formats.☆390Updated this week
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆241Oct 21, 2025Updated 11 months ago
- Utility that converts SBOM documents from CycloneDX to SPDX☆35Jan 19, 2024Updated 2 years ago
- SPDX Command Line Tools using the Spdx-Java-Library☆100Oct 3, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository stores meetings minutes for the SPDX project☆43Updated this week
- A taxonomy of all official CycloneDX property namespaces and names☆26Oct 3, 2026Updated last week
- A Python library to parse, validate and create SPDX documents.☆256Mar 13, 2026Updated 6 months ago
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆14Oct 2, 2026Updated last week
- PURL to CPE Relationship mapping project.☆132Updated this week
- Open Source License Compliance Checklists☆11Oct 18, 2024Updated last year
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- A light-weight app to audit and inventory large codebases for open source license compliance.☆74Updated this week
- Reference GitHub Workflows for SBOM generation from the CISA SBOM Generation Reference Implementation Tiger Team☆34Feb 2, 2026Updated 8 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆64May 27, 2024Updated 2 years ago
- Automating Compliance Tooling Project☆24Jan 28, 2022Updated 4 years ago
- Support CI generation of SBOMs via golang tooling.☆427Jan 13, 2025Updated last year
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆93Updated this week
- Using AI Agents for Audit SBOMs for OSS Compliance☆15Apr 7, 2025Updated last year
- The Disclosure-CLI provides an easy way to access the public api of the FOSS Disclosure Portal. It is the recommended tool for external s…☆19Apr 14, 2026Updated 5 months ago
- This repo contains license and copyright analysis results of open source packages. It further contains other license compliance relevant …☆54Updated this week
- Publications done by Double Open.☆16Jun 5, 2020Updated 6 years ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆473Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A brief tutorial on how to use Software Package Data Exchange (SPDX)☆147Jun 6, 2026Updated 4 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆117Updated this week
- GitHub action to produce a SBOM report from a given Black Duck project☆12Feb 5, 2026Updated 8 months ago
- Functionality and DataModels of OWASP CycloneDX for Python☆117Oct 3, 2026Updated last week
- OSS License Simple Viewer is a simple Excel-based tool as OSS license reference for engineers.☆14Nov 20, 2020Updated 5 years ago
- The legal review and SBOM system used by SUSE and openSUSE☆63Oct 3, 2026Updated last week
- SPDX 2.0 document creation and storage☆16Dec 13, 2022Updated 3 years ago
- A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby☆1,117Updated this week
- SPDX Merge tool☆53Sep 7, 2026Updated last month
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆560Updated this week
- SPDX Tools☆146Oct 7, 2025Updated last year
- A desktop workbench for OSS Review Toolkit result files.☆29Updated this week
- A Yocto meta-layer for generating CycloneDX SBOMs and automatically uploading them to Dependency Track.☆22May 24, 2024Updated 2 years ago
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆123Feb 28, 2026Updated 7 months ago
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆70Apr 8, 2024Updated 2 years ago
- Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Sup…☆69Updated this week