Build software better, together

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Updated May 1, 2024
Java

nexB / scancode-toolkit

Sponsor

Star

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

Updated May 1, 2024
Python

package-url / purl-spec

Star

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

url package dependencies spdx package-management purl package-url sbom cyclonedx

Updated Apr 17, 2024

nexB / vulnerablecode

Sponsor

Star

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

security vulnerability snyk vulnerability-databases vulndb cve cpe nvd vulnerability-detection osv vulnerability-identification vulnerability-scanners cvss security-tools ossindex purl package-url vulnerability-database

Updated Apr 24, 2024
Python

CycloneDX / cdxgen

Star

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

docker containers supply-chain owasp bom oci sca software-bill-of-materials purl package-url sbom cyclonedx saasbom mlbom

Updated May 1, 2024
JavaScript

CycloneDX / cyclonedx-maven-plugin

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

maven owasp maven-plugin bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

Updated May 1, 2024
Java

CycloneDX / cyclonedx-cli

Star

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

Updated Feb 2, 2024
C#

CycloneDX / cyclonedx-python

Star

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

python environment poetry conda owasp python3 pip bom spdx requirements bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

Updated May 1, 2024
Python

CycloneDX / cyclonedx-dotnet

Star

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

dotnet owasp bom dotnet-core vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

Updated Apr 29, 2024
C#

CycloneDX / cyclonedx-gradle-plugin

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

gradle owasp gradle-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator

Updated Apr 29, 2024
Java

tiiuae / sbomnix

Star

A suite of utilities to help with software supply chain challenges on nix targets

python security nix static-analysis dependencies cpe software-supply-chain vulnerability-scanners bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator software-supply-chain-security spdx-sbom sbom-tool

Updated Apr 9, 2024
Python

nexB / scancode.io

Sponsor

Star

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

docker open-source virtual-machine vulnerabilities license spdx sca scancode software-composition-analysis purl package-url cyclonedx foss-compliance

Updated Apr 30, 2024
Python

CycloneDX / cyclonedx-rust-cargo

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

rust owasp cargo bom vex spdx bill-of-materials software-bill-of-materials purl package-url cargo-plugin sbom cyclonedx sbom-generator obom mbom saasbom

Updated May 2, 2024
Rust

CycloneDX / cyclonedx-core-java

Star

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom

Updated Apr 29, 2024
Java

AppThreat / vulnerability-db

Star

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.

cli database cve nvd vulnerability-detection sca advisories vers purl vulnerability-database

Updated Apr 21, 2024
Python

CycloneDX / sbom-utility

Star

Utility that provides an API platform for validating, querying and managing BOM data

owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality

Updated May 1, 2024
Go

package-url / packageurl-python

Star

Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

python library hacktoberfest purl package-url