Cra Python Packages

embtrace-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

craevidence

CLI for EU Cyber Resilience Act compliance evidence: SBOM validation, vulnerability checks, and signing

jochwacht-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

aisbom-cli

Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.

embtrace-check

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

gangmu-sbom

Generate a CycloneDX or SPDX SBOM for embedded C/C++ firmware from the build's compile database and linker map.

gangmu-rules

Community rule base for gangmu: maps chip-vendor SDK directories to upstream open-source components and versions, with evidence re-derived from upstream releases in CI. CDLA-Permissive-2.0. 嵌入式 SDK 组件识别规则库。

cra24

CRA Article 14 dossiers from an embedded Linux build tree. Scan Yocto or Buildroot, decide affectedness with the evidence shown, emit CSAF, OpenVEX and SRP with the statutory clock running. Zero runtime dependencies, offline-capable.

cra-compliance-mcp

🌉 Maps EU Cyber Resilience Act (Reg 2024/2847) records into AI-governance evidence — CE marking + SBOM.

meok-cra-annex-iv-classifier-mcp

🔐 Classifies products against the EU Cyber Resilience Act (Reg 2024/2847) Annex III/IV over MCP — 9-category essential-requirements audit with HMAC-signed outputs. MIT.

capa-language

A capability-typed language that emits machine-verifiable supply-chain SBOMs by construction: per-function CycloneDX, SPDX, VEX and SLSA artefacts that match the code, not a scanner's guess.

embtrace

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

art14

Which SBOM vulnerabilities trigger an EU Cyber Resilience Act Article 14 reporting decision and why.

opencra

Sovereign SBOM scanner & Cyber Resilience Act (CRA) compliance toolkit. Generate CycloneDX/SPDX, detect supply chain CVEs/KEVs, and automate 24-hour incident reporting workflows for EU software vendors.

meok-cra-art14-reporter-mcp

🔌 Exposes EU CRA Article 14 actively-exploited-vulnerability reporter - ENISA + CSIRT payload. 11 Sept 2026 cliff. MIT. By MEOK AI Labs.

jochwacht

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

sbom-embedded

CycloneDX SBOM generator for Yocto and Buildroot. Reads the manifests a finished build already wrote — no rebuild, no bitbake.

cra-scraper

CRA exam ratings scraper and analyzer — search FFIEC database, parse Performance Evaluations, identify CDFI partnership opportunities

cra-scope

Open-source CLI for preparing EU Cyber Resilience Act (Regulation 2024/2847) Article 14 notifications for the ENISA Single Reporting Platform.

csaf-check

Python API and CLI for CSAF 2.0 and VEX validation using Secvisogram's validator, with CI-friendly unavailable-validator handling.

cra-sbom-evidence

CRA Article 14 evidence pack from your SBOM and VEX feeds. Every clause cited verbatim. Every output hashed.

t4127-engine

Open-source Canadian payroll deductions calculator. CRA T4127 formulas for all provinces, 92K+ tests, penny-for-penny PDOC validated.