Search Packages

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

lib4sbom

Library to ingest and generate SBOMs

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

ntia-conformance-checker

Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.

sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

sbom2dot

Create a dependency graph of the components within a SBOM

sbom4files

SBOM generator for files within a directory

cyclonedx-buildroot

Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

uv-sbom-bin

Generate SBOMs for Python projects managed by uv.

osslili

Open Source License Identification Library

puncia

Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer.

semantic-copycat-oslili

Semantic Copycat Open Source License Identification Library

mcp-semclone

mcp-semclone - Model Context Protocol Server for SEMCL.ONE

vendetect

Command-line tool for automatically detecting vendored and copy/pasted code

semantic-copycat-purl2notices

Generate legal notices (attribution to authors and copyrights) for software packages

it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

vcpkg-sbom

📓 A python CLI tool to extract a software bill of materials and license info from a vcpkg manifest.

purl2src

Translate Package URLs (PURLs) into validated download URLs for source code artifacts

purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

semantic-copycat-purl2src

Translate Package URLs (PURLs) into validated download URLs for source code artifacts

binarysniffer

BINARYSNIFFER - Binary Static Analyzer

sbom2csv

Transform SBOM contents into a formatted csv file.