Sbom Python Packages

cyclonedx-python-lib

Functionality and DataModels of OWASP CycloneDX for Python

34.2M 117 67

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

1.8M 393 102

reuse

This is a mirror of https://codeberg.org/fsfe/reuse-tool

691K 593 163

lib4sbom

Library to ingest and generate SBOMs

115K 45 22

commoncode

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

103K 3K 809

scancode-toolkit

80K 3K 806

ca9

CA9 is a local evidence engine for Python AppSec triage. It sits after scanners and before engineers waste time, proving which findings matter.

69K 9 1

vulners

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

53K 376 65

lib4vex

Library to ingest and generate VEX documents

46K 21 5

csaf-tool

CSAF generator and validator

46K 9 3

lintro

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

40K 1 0

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

38K 393 102

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

26K 2K 670

ai-rulez

Standards-compliant lifecycle tool for agent knowledge and capabilities: author, generate, bundle, validate, govern, publish.

25K 159 16

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

23K 1K 139

ntia-conformance-checker

Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.

22K 93 27

agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

14K 31 9

blint

blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.

13K 458 48

deepbom

Local static analysis and evidence generation for deployed AI model artifacts

13K 2 0

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

12K 44 9

anchore-syft

Python wheels for installing Anchore's Syft tool for generating a Software Bill of Materials

12K 1 1

airom

Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.

10K 16 4

sbomdiff

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

9K 45 8

sbom4python

A tool to generate a SBOM (Software Bill of Materials) for an installed Python module

9K 40 11