Sbom Tool Python Packages

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

lib4sbom

Library to ingest and generate SBOMs

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

ntia-conformance-checker

Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.

sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

sbom2dot

Create a dependency graph of the components within a SBOM

sbom4files

SBOM generator for files within a directory

cyclonedx-buildroot

Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

uv-sbom-bin

Generate SBOMs for Python projects managed by uv.

osslili

Open Source License Identification Library

puncia

Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer.

semantic-copycat-oslili

OSLILI - Open Source License Identification Library

vendetect

Command-line tool for automatically detecting vendored and copy/pasted code

mcp-semclone

mcp-semclone - Model Context Protocol Server for SEMCL.ONE

semantic-copycat-purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

purl2src

Translate Package URLs (PURLs) into validated download URLs for source code artifacts

vcpkg-sbom

📓 A python CLI tool to extract a software bill of materials and license info from a vcpkg manifest.

semantic-copycat-purl2src

PURL2SRC - Package URL (PURL) to Source

purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

binarysniffer

BINARYSNIFFER - Binary Static Analyzer

sbom2csv

Transform SBOM contents into a formatted csv file.