Sbom Tool Python Packages

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

lib4sbom

Library to ingest and generate SBOMs

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

ntia-conformance-checker

Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

sbom2dot

Create a dependency graph of the components within a SBOM

sbom4files

SBOM generator for files within a directory

cyclonedx-buildroot

Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

uv-sbom-bin

Generate SBOMs for Python projects managed by uv.

osslili

OSLILI - Open Source License Identification Library

semantic-copycat-oslili

OSLILI - Open Source License Identification Library

vendetect

Command-line tool for automatically detecting vendored and copy/pasted code

puncia

Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer.

purl2src

PURL2SRC - Package URL (PURL) to Source

semantic-copycat-purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

mcp-semclone

mcp-semclone - Model Context Protocol Server for SEMCL.ONE

semantic-copycat-purl2src

PURL2SRC - Package URL (PURL) to Source

syfter

SBOM generation and management tool using Syft

binarysniffer

BINARYSNIFFER - Binary Static Analyzer

purl2notices

PURL2NOTICES - Package URL (PURL) to Legal Notices

it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

vcpkg-sbom

📓 A python CLI tool to extract a software bill of materials and license info from a vcpkg manifest.