Cyclonedx Python Packages

cyclonedx-python-lib

Functionality and DataModels of OWASP CycloneDX for Python

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

lib4sbom

Library to ingest and generate SBOMs

commoncode

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

lib4vex

Library to ingest and generate VEX documents

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

ai-rulez

Standards-compliant lifecycle tool for agent knowledge and capabilities: author, generate, bundle, validate, govern, publish.

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

blint

blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

airom

Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.

sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

sbom4python

A tool to generate a SBOM (Software Bill of Materials) for an installed Python module

sbom4files

SBOM generator for files within a directory

sbom2dot

Create a dependency graph of the components within a SBOM

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

meta-package-manager

🎁 snapshot every package on your machine to one file, restore it on a new one

maunprekshak

The Silent Observer — Fast, local-first security scanner for dependencies (SCA), exposed secrets & git history, SAST, Dockerfiles, and GitHub Actions with multi-provider AI remediation.

distro2sbom

Generates SBOM files from system packaging information

embtrace-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

agent-harness-aibom

AIBOM generator for AI agent harnesses (Hermes, OpenClaw) - CycloneDX 1.6 output for runtime, model, skill, MCP, hook, and secrets-surface components