Cyber Resilience Act Python Packages

attestplane

Verifiable audit substrate for AI agents — EU AI Act Article 12 ready. Apache 2.0.

embtrace-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

craevidence

CLI for EU Cyber Resilience Act compliance evidence: SBOM validation, vulnerability checks, and signing

jochwacht-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

aisbom-cli

Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.

embtrace-check

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

cra24

CRA Article 14 dossiers from an embedded Linux build tree. Scan Yocto or Buildroot, decide affectedness with the evidence shown, emit CSAF, OpenVEX and SRP with the statutory clock running. Zero runtime dependencies, offline-capable.

cra-compliance-mcp

🌉 Maps EU Cyber Resilience Act (Reg 2024/2847) records into AI-governance evidence — CE marking + SBOM.

precommiteu

Catch EU regulatory violations at PR time — GDPR, EU AI Act, NIS2, DORA, CRA, DSA, DMA and the Data Act. Runs entirely on your machine or CI runner, with zero data egress. Apache-2.0.

meok-cra-annex-iv-classifier-mcp

🔐 Classifies products against the EU Cyber Resilience Act (Reg 2024/2847) Annex III/IV over MCP — 9-category essential-requirements audit with HMAC-signed outputs. MIT.

embtrace

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

art14

Which SBOM vulnerabilities trigger an EU Cyber Resilience Act Article 14 reporting decision and why.

opencra

Sovereign SBOM scanner & Cyber Resilience Act (CRA) compliance toolkit. Generate CycloneDX/SPDX, detect supply chain CVEs/KEVs, and automate 24-hour incident reporting workflows for EU software vendors.

jochwacht

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

cra-compliance-kit

Open-source EU Cyber Resilience Act compliance toolkit — SBOMs, CVE matching, device identity, ready for the Sep 2026 deadline

cra-scope

Open-source CLI for preparing EU Cyber Resilience Act (Regulation 2024/2847) Article 14 notifications for the ENISA Single Reporting Platform.

csaf-check

Python API and CLI for CSAF 2.0 and VEX validation using Secvisogram's validator, with CI-friendly unavailable-validator handling.