Repositories list

• cyclonedx-node-yarn

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

  nodejsnodeyarn+ 9bomhacktoberfestbill-of-materialssoftware-bill-of-materialssbomcyclonedxyarn-plugin+ 2

  JavaScript

  •

  Apache License 2.0

  •7•24•14•10•Updated Jan 5, 2026Jan 5, 2026

• cyclonedx-node-npm

  Public

  CycloneDX/cyclonedx-node-npm’s past year of commit activity
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  nodejsnpmnode+ 10dependency-graphowaspbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 3

  JavaScript

  •

  Apache License 2.0

  •28•116•12•7•Updated Jan 3, 2026Jan 3, 2026

• cyclonedx-webpack-plugin

  Public

  CycloneDX/cyclonedx-webpack-plugin’s past year of commit activity
  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  javascriptwebpackwebpack-plugin+ 13owaspbomspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 6

  JavaScript

  •

  Apache License 2.0

  •10•28•11•7•Updated Jan 3, 2026Jan 3, 2026

• cyclonedx-javascript-library

  Public

  CycloneDX/cyclonedx-javascript-library’s past year of commit activity
  Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

  jsonlibrarynode+ 16webxmlowaspbomvexvdrspdx+ 9

  TypeScript

  •

  Apache License 2.0

  •14•22•18•9•Updated Jan 3, 2026Jan 3, 2026

• cyclonedx-python

  Public

  CycloneDX/cyclonedx-python’s past year of commit activity
  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonenvironmentpoetry+ 16condaowasppython3pipbomspdxhacktoberfest+ 9

  Python

  •

  Apache License 2.0

  •90•349•17•8•Updated Jan 3, 2026Jan 3, 2026

• cyclonedx-esbuild

  Public

  CycloneDX/cyclonedx-esbuild’s past year of commit activity
  Create CycloneDX Software Bill of Materials (SBOM) from esbuild projects

  javascriptowaspbom+ 12spdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedx+ 5

  TypeScript

  •

  Apache License 2.0

  •1•3•6•4•Updated Jan 3, 2026Jan 3, 2026

• sbom-utility

  Public

  CycloneDX/sbom-utility’s past year of commit activity
  Utility that provides an API platform for validating, querying and managing BOM data

  owaspbomvex+ 16vdrspdxspdx-licensehacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 9

  Go

  •

  Apache License 2.0

  •18•124•27•1•Updated Jan 2, 2026Jan 2, 2026

• cyclonedx-property-taxonomy

  Public

  CycloneDX/cyclonedx-property-taxonomy’s past year of commit activity
  A taxonomy of all official CycloneDX property namespaces and names

  registrytaxonomycyclonedx

  Ruby

  •

  Apache License 2.0

  •38•19•15•2•Updated Jan 1, 2026Jan 1, 2026

• cyclonedx-php-composer

  Public

  CycloneDX/cyclonedx-php-composer’s past year of commit activity
  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  phpcomposerdependency-graph+ 13owaspbomcomposer-pluginspdxhacktoberfestbill-of-materialssoftware-bill-of-materials+ 6

  PHP

  •

  Apache License 2.0

  •7•80•16•2•Updated Dec 27, 2025Dec 27, 2025

• cyclonedx-php-library

  Public
  Functionality and DataModels of OWASP CycloneDX for PHP

  phplibraryowasp+ 12bomvexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 5

  PHP

  •

  Apache License 2.0

  •0•12•16•6•Updated Dec 27, 2025Dec 27, 2025

• .github

  Public

  CycloneDX/.github’s past year of commit activity
  4•0•3•0•Updated Dec 24, 2025Dec 24, 2025

• cyclonedx-gradle-plugin

  Public

  CycloneDX/cyclonedx-gradle-plugin’s past year of commit activity
  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  gradleowaspgradle-plugin+ 9bomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 2

  Java

  •

  Apache License 2.0

  •88•213•72•2•Updated Dec 23, 2025Dec 23, 2025

• cyclonedx-python-lib

  Public

  CycloneDX/cyclonedx-python-lib’s past year of commit activity
  Functionality and DataModels of OWASP CycloneDX for Python

  pythonlibraryowasp+ 16bomvexspdxhacktoberfestattestationbill-of-materialssoftware-bill-of-materials+ 9

  Python

  •

  Apache License 2.0

  •59•98•25•11•Updated Dec 22, 2025Dec 22, 2025

• cyclonedx-ruby-gem

  Public

  CycloneDX/cyclonedx-ruby-gem’s past year of commit activity
  Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

  rubybundlergem+ 14owaspbomvexspdxbill-of-materialssoftware-bill-of-materialspurl+ 7

  Ruby

  •

  Apache License 2.0

  •20•36•10•11•Updated Dec 22, 2025Dec 22, 2025

• specification

  Public

  CycloneDX/specification’s past year of commit activity
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

  machine-learningsupply-chainowasp+ 17specificationstandardbomsoftwarevexlicensespdx+ 10

  XSLT

  •

  Apache License 2.0

  •81•467•148•29•Updated Dec 20, 2025Dec 20, 2025

• transparency-exchange-api

  Public
  A standard API specification for exchanging supply chain artifacts and intelligence

  owaspspecificationbom+ 7bill-of-materialssoftware-bill-of-materialsapi-specsbomcyclonedxsbom-distributiontc54

  Shell

  •

  Apache License 2.0

  •17•95•46•3•Updated Dec 18, 2025Dec 18, 2025

• cyclonedx-node-pnpm

  Public

  CycloneDX/cyclonedx-node-pnpm’s past year of commit activity
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js PNPM projects.

  nodejsnodebom+ 6pnpmbill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-generator

  Apache License 2.0

  •5•23•1•1•Updated Dec 16, 2025Dec 16, 2025

• cyclonedx-core-java

  Public

  CycloneDX/cyclonedx-core-java’s past year of commit activity
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  libraryowaspbom+ 11vexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 4

  Java

  •

  Apache License 2.0

  •78•101•34•26•Updated Dec 15, 2025Dec 15, 2025

• cyclonedx-dotnet

  Public

  CycloneDX/cyclonedx-dotnet’s past year of commit activity
  Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

  dotnetowaspbom+ 14dotnet-corevexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 7

  C#

  •

  Apache License 2.0

  •117•248•48•21•Updated Dec 12, 2025Dec 12, 2025

• cyclonedx-rust-cargo

  Public

  CycloneDX/cyclonedx-rust-cargo’s past year of commit activity
  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  rustowaspcargo+ 14bomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-url+ 7

  Rust

  •

  Apache License 2.0

  •50•151•36•16•Updated Dec 10, 2025Dec 10, 2025

• cyclonedx-maven-plugin

  Public

  CycloneDX/cyclonedx-maven-plugin’s past year of commit activity
  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  mavenowaspmaven-plugin+ 13bomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-url+ 6

  Java

  •

  Apache License 2.0

  •95•351•81•21•Updated Dec 10, 2025Dec 10, 2025

• homebrew-cyclonedx

  Public

  CycloneDX/homebrew-cyclonedx’s past year of commit activity
  CycloneDX Homebrew Tap

  Ruby

  •

  Apache License 2.0

  •2•2•0•0•Updated Dec 10, 2025Dec 10, 2025

• cyclonedx-cli

  Public
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

  owaspbomvex+ 12spdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 5

  C#

  •

  Apache License 2.0

  •75•438•109•18•Updated Dec 9, 2025Dec 9, 2025

• cyclonedx-dotnet-library

  Public

  CycloneDX/cyclonedx-dotnet-library’s past year of commit activity
  .NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  dotnetnugetowasp+ 10bomdotnet-corevexbill-of-materialssoftware-bill-of-materialssbomcyclonedx+ 3

  C#

  •

  Apache License 2.0

  •30•26•17•27•Updated Dec 9, 2025Dec 9, 2025

• cyclonedx-buildroot

  Public
  Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

  bombuildrootbill-of-materials+ 5software-bill-of-materialssbomcyclonedxsbom-generatorsbom-tool

  Python

  •

  Apache License 2.0

  •6•14•2•0•Updated Dec 9, 2025Dec 9, 2025

• Sunshine

  Public

  CycloneDX/Sunshine’s past year of commit activity
  Sunshine - SBOM visualization tool

  owaspbombill-of-materials+ 3software-bill-of-materialssbomcyclonedx

  HTML

  •

  Apache License 2.0

  •11•91•3•0•Updated Dec 8, 2025Dec 8, 2025

• cyclonedx-authoring-tool

  Public
  An experimental user interface for manually creating, editing, and viewing CycloneDX SBOMs

  nodevueowasp+ 13bomvexspdxauthoring-toolbill-of-materialssoftware-bill-of-materialspurl+ 6

  Vue

  •

  Apache License 2.0

  •3•9•5•9•Updated Dec 3, 2025Dec 3, 2025

• cyclonedx-linux-generator

  Public
  Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions

  linuxowaspbom+ 5bill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-generator

  Java

  •

  Other

  •13•51•5•15•Updated Dec 2, 2025Dec 2, 2025

• cyclonedx-node-module

  Public
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

  nodejsnodedependency-graph+ 8bommetapackagemeta-packagesoftware-bill-of-materialssbomcyclonedxsbom-generator+ 1

  Apache License 2.0

  •38•135•0•0•Updated Nov 24, 2025Nov 24, 2025

• cyclonedx-web-tool

  Public

  CycloneDX/cyclonedx-web-tool’s past year of commit activity
  A web based tool for working with CycloneDX BOMs

  owaspbomvex+ 9bill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxobom+ 2

  HTML

  •

  Apache License 2.0

  •8•43•8•7•Updated Nov 21, 2025Nov 21, 2025