Repositories list

• cdxgen

  Public
  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

  dockercontainerssupply-chain+ 11owaspbomociscasoftware-bill-of-materialspurlpackage-url+ 4

  JavaScript

  •

  Apache License 2.0

  •214•783•387•17•Updated Sep 14, 2025Sep 14, 2025

• cyclonedx-node-yarn

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

  nodejsnodeyarn+ 9bomhacktoberfestbill-of-materialssoftware-bill-of-materialssbomcyclonedxyarn-plugin+ 2

  JavaScript

  •

  Apache License 2.0

  •7•23•14•13•Updated Sep 14, 2025Sep 14, 2025

• cyclonedx-php-composer

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  phpcomposerdependency-graph+ 13owaspbomcomposer-pluginspdxhacktoberfestbill-of-materialssoftware-bill-of-materials+ 6

  PHP

  •

  Apache License 2.0

  •7•73•15•1•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-gradle-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  gradleowaspgradle-plugin+ 9bomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 2

  Java

  •

  Apache License 2.0

  •87•199•67•6•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-python-lib

  Public
  Python implementation of OWASP CycloneDX

  pythonlibraryowasp+ 16bomvexspdxhacktoberfestattestationbill-of-materialssoftware-bill-of-materials+ 9

  Python

  •

  Apache License 2.0

  •54•85•20•10•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-node-npm

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  nodejsnpmnode+ 10dependency-graphowaspbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 3

  JavaScript

  •

  Apache License 2.0

  •25•99•11•5•Updated Sep 13, 2025Sep 13, 2025

• transparency-exchange-api

  Public
  A standard API specification for exchanging supply chain artifacts and intelligence

  owaspspecificationbom+ 7bill-of-materialssoftware-bill-of-materialsapi-specsbomcyclonedxsbom-distributiontc54

  Shell

  •

  Apache License 2.0

  •17•84•61•4•Updated Sep 13, 2025Sep 13, 2025

• specification

  Public
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

  machine-learningsupply-chainowasp+ 17specificationstandardbomsoftwarevexlicensespdx+ 10

  XSLT

  •

  Apache License 2.0

  •71•425•128•22•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-ruby-gem

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

  bundlergemowasp+ 14bomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-url+ 7

  Ruby

  •

  Apache License 2.0

  •19•30•7•9•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-webpack-plugin

  Public
  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  javascriptwebpackwebpack-plugin+ 13owaspbomspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 6

  JavaScript

  •

  Apache License 2.0

  •10•27•10•7•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-javascript-library

  Public
  Core functionality of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

  jsonlibrarynode+ 16webxmlowaspbomvexvdrspdx+ 9

  TypeScript

  •

  Apache License 2.0

  •14•17•17•9•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-php-library

  Public
  PHP Implementation of OWASP CycloneDX Bill of Materials (BOM)

  phplibraryowasp+ 12bomvexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 5

  PHP

  •

  Apache License 2.0

  •0•10•14•5•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-python

  Public
  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonenvironmentpoetry+ 16condaowasppython3pipbomspdxhacktoberfest+ 9

  Python

  •

  Apache License 2.0

  •78•324•17•7•Updated Sep 13, 2025Sep 13, 2025

• cyclonedx-linux-generator

  Public
  Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions

  linuxowaspbom+ 5bill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-generator

  Java

  •

  Other

  •14•49•5•15•Updated Sep 12, 2025Sep 12, 2025

• cyclonedx-authoring-tool

  Public
  An experimental user interface for manually creating, editing, and viewing CycloneDX SBOMs

  nodevueowasp+ 13bomvexspdxauthoring-toolbill-of-materialssoftware-bill-of-materialspurl+ 6

  Vue

  •

  Apache License 2.0

  •3•8•5•9•Updated Sep 12, 2025Sep 12, 2025

• cyclonedx-rust-cargo

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  owaspcargobom+ 14vexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlcargo-plugin+ 7

  Rust

  •

  Apache License 2.0

  •50•141•30•14•Updated Sep 12, 2025Sep 12, 2025

• cyclonedx-maven-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  owaspbomvex+ 13spdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedx+ 6

  Java

  •

  Apache License 2.0

  •94•332•78•14•Updated Sep 12, 2025Sep 12, 2025

• cyclonedx-core-java

  Public
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  libraryowaspbom+ 11vexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 4

  Java

  •

  Apache License 2.0

  •77•96•34•14•Updated Sep 12, 2025Sep 12, 2025

• guides

  Public
  CSS

  •

  Creative Commons Attribution 4.0 International

  •8•5•11•1•Updated Sep 12, 2025Sep 12, 2025

• tool-center

  Public
  Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

  owaspvexvdr+ 11sbomcyclonedxobommbomsaasbommlbomsoftware-transparency+ 4

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •32•7•2•8•Updated Sep 12, 2025Sep 12, 2025

• cyclonedx-web-tool

  Public
  A web based tool for working with CycloneDX BOMs

  owaspbomvex+ 9bill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxobom+ 2

  HTML

  •

  Apache License 2.0

  •7•39•8•7•Updated Sep 10, 2025Sep 10, 2025

• cyclonedx-cli

  Public
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

  owaspbomvex+ 12spdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 5

  C#

  •

  Apache License 2.0

  •70•401•103•18•Updated Sep 9, 2025Sep 9, 2025

• cyclonedx-gomod

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

  owaspbomvex+ 9bill-of-materialssoftware-bill-of-materialsgo-modulessbomsbom-generatorobommbom+ 2

  Go

  •

  Apache License 2.0

  •30•162•32•10•Updated Sep 9, 2025Sep 9, 2025

• cyclonedx-node-pnpm

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js PNPM projects.

  nodejsnodebom+ 6pnpmbill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-generator

  Apache License 2.0

  •4•19•1•1•Updated Sep 8, 2025Sep 8, 2025

• cyclonedx-buildroot

  Public
  Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

  bombuildrootbill-of-materials+ 5software-bill-of-materialssbomcyclonedxsbom-generatorsbom-tool

  Python

  •

  Apache License 2.0

  •6•12•6•1•Updated Sep 6, 2025Sep 6, 2025

• cyclonedx-node-module

  Public
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

  nodejsnodedependency-graph+ 8bommetapackagemeta-packagesoftware-bill-of-materialssbomcyclonedxsbom-generator+ 1

  Apache License 2.0

  •38•134•0•0•Updated Sep 6, 2025Sep 6, 2025

• cyclonedx-dotnet

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

  dotnetowaspbom+ 14dotnet-corevexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 7

  C#

  •

  Apache License 2.0

  •105•236•44•23•Updated Sep 4, 2025Sep 4, 2025

• cyclonedx-go

  Public
  Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  golanglibraryowasp+ 8bomvexbill-of-materialssoftware-bill-of-materialssbomobommbom+ 1

  Go

  •

  Apache License 2.0

  •34•94•13•11•Updated Sep 4, 2025Sep 4, 2025

• cyclonedx-dotnet-library

  Public
  .NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  dotnetnugetowasp+ 10bomdotnet-corevexbill-of-materialssoftware-bill-of-materialssbomcyclonedx+ 3

  C#

  •

  Apache License 2.0

  •29•24•15•17•Updated Sep 4, 2025Sep 4, 2025

• sbom-commons

  Public archive
  Lockheed Martin developed common SBOM library

  owaspbombill-of-materials+ 3software-bill-of-materialssbomcyclonedx

  Java

  •

  Other

  •1•2•0•8•Updated Sep 3, 2025Sep 3, 2025