PyRank

Sbom Tool Python Packages

Python packages with the GitHub topic sbom-tool. Sorted by relevance, with stars and monthly downloads.
CycloneDX
cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

1.9M 386 94
anthonyharrison
lib4sbom

Library to ingest and generate SBOMs

361K 44 21
CycloneDX
cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

96K 386 94
intel
cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

45K 2K 634
spdx
ntia-conformance-checker

Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.

22K 89 24
anthonyharrison
sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

20K 42 9
anthonyharrison
sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

15K 45 8
anthonyharrison
sbom2dot

Create a dependency graph of the components within a SBOM

11K 21 0
anthonyharrison
sbom4files

SBOM generator for files within a directory

11K 8 1
CycloneDX
cyclonedx-buildroot

Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

2K 16 7
Taketo-Yoda
uv-sbom-bin

Generate SBOMs for Python projects managed by uv.

2K 4 0
oscarvalenzuelab
semantic-copycat-oslili

OSLILI - Open Source License Identification Library

1K 7 1
SemClone
mcp-semclone

mcp-semclone - Model Context Protocol Server for SEMCL.ONE

735 2 0
oscarvalenzuelab
semantic-copycat-purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

731 1 0
SemClone
osslili

OSLILI - Open Source License Identification Library

693 7 1
oscarvalenzuelab
semantic-copycat-purl2src

PURL2SRC - Package URL (PURL) to Source

512 4 0
ARPSyndicate
puncia

Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer.

511 663 28
trailofbits
vendetect

A tool to automatically detect copy+pasted and vendored code between repositories

413 83 6
trailofbits
it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

387 398 26
SemClone
binarysniffer

BINARYSNIFFER - Binary Static Analyzer

309 3 0
SemClone
purl2src

PURL2SRC - Package URL (PURL) to Source

280 4 0
SemClone
purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

262 1 0
SemClone
vulnq

vulnq - Vulnerability Query Tool

235 0 0
SemClone
ossval

OSSVAL - Open Source Software Valuation

214 1 0