Sbom Tool Python Packages

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

lib4sbom

Library to ingest and generate SBOMs

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

ntia-conformance-checker

Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

sbom4files

SBOM generator for files within a directory

sbom2dot

Create a dependency graph of the components within a SBOM

embtrace-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

licenseid

A Python CLI and library to get the SPDX License ID from license text

jochwacht-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

cyclonedx-buildroot

Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

embtrace-check

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

osslili

OSLILI - Open Source License Identification Library

puncia

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

uv-sbom-bin

Generate SBOMs for Python projects managed by uv.

sbomify-action

SBOM generation, enrichment, and management for CI/CD. CycloneDX & SPDX, from lockfiles or containers.

mcp-semclone

mcp-semclone - Model Context Protocol Server for SEMCL.ONE

ossbomer

Profile-driven SBOM validation, conformance, and license policy (SPDX / CycloneDX)

embtrace

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

vulnq

vulnq - Vulnerability Query Tool

semantic-copycat-oslili

OSLILI - Open Source License Identification Library

jochwacht

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.