purl

Star

Here are 54 public repositories matching this topic...

Language:All

Filter by language

All54 Python16 Java6 Go5 Rust5 C#3 HTML3 JavaScript3 PHP3 Vue2 Elixir1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

DependencyTrack /dependency-track

Star2.9k

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx

UpdatedMar 17, 2025
Java

aboutcode-org /scancode-toolkit

Sponsor

Star2.2k

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet projecthttps://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

licensing packages open-source-licensing dependency-graph provenance dependencies license spdx copyright sca spdx-licenses license-checking license-scan copyright-scan software-composition-analysis oss-compliance purl package-url sbom cyclonedx

UpdatedMar 12, 2025
Python

package-url /purl-spec

Star739

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion athttps://gitter.im/package-url/Lobby

url package dependencies spdx package-management purl package-url sbom cyclonedx

UpdatedMar 14, 2025

CycloneDX /cdxgen

Star647

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. GPT:https://chatgpt.com/g/g-673bfeb4037481919be8a2cd1bf868d2-cdxgen

docker containers supply-chain owasp bom oci sca software-bill-of-materials purl package-url sbom cyclonedx saasbom cbom

UpdatedMar 17, 2025
JavaScript

aboutcode-org /vulnerablecode

Sponsor

Star565

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnethttps://nlnet.nl/project/vulnerabilitydatabase/ forhttps://www.aboutcode.org/ Chat athttps://gitter.im/aboutcode-org/vulnerablecode Docs athttps://vulnerablecode.readthedocs.org/

security vulnerability snyk vulnerability-databases vulndb cve cpe nvd vulnerability-detection osv vulnerability-identification vulnerability-scanners cvss security-tools ossindex purl package-url vulnerability-database

UpdatedMar 14, 2025
Python

CycloneDX /cyclonedx-cli

Star342

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

UpdatedNov 24, 2024
C#

CycloneDX /cyclonedx-maven-plugin

Star314

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

maven owasp maven-plugin bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

UpdatedFeb 26, 2025
Java

CycloneDX /cyclonedx-python

Star274

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

python environment poetry conda owasp python3 pip bom spdx hacktoberfest requirements bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

UpdatedMar 15, 2025
Python

CycloneDX /cyclonedx-dotnet

Star206

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

dotnet owasp bom dotnet-core vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

UpdatedMar 17, 2025
C#

CycloneDX /cyclonedx-gradle-plugin

Star180

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

gradle owasp gradle-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator

UpdatedMar 17, 2025
Java

tiiuae /sbomnix

Star160

A suite of utilities to help with software supply chain challenges on nix targets

python security nix static-analysis dependencies cpe software-supply-chain vulnerability-scanners bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator software-supply-chain-security spdx-sbom sbom-tool

UpdatedFeb 11, 2025
Python

aboutcode-org /scancode.io

Sponsor

Star128

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet projecthttps://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

docker open-source virtual-machine vulnerabilities license spdx sca scancode software-composition-analysis purl package-url cyclonedx foss-compliance

UpdatedMar 17, 2025
Python

CycloneDX /cyclonedx-rust-cargo

Star122

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

rust owasp cargo bom vex spdx bill-of-materials software-bill-of-materials purl package-url cargo-plugin sbom cyclonedx sbom-generator obom mbom saasbom

UpdatedMar 5, 2025
Rust

AppThreat /vulnerability-db

Star110

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers.

cli database cve nvd vulnerability-detection sca advisories vers purl vulnerability-database

UpdatedMar 3, 2025
Python

CycloneDX /sbom-utility

Star104

Utility that provides an API platform for validating, querying and managing BOM data

owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality

UpdatedNov 19, 2024
Go

CycloneDX /cyclonedx-core-java

Star87

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

library owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom

UpdatedMar 17, 2025
Java

CycloneDX /cyclonedx-python-lib

Star78

Python implementation of OWASP CycloneDX

python library owasp bom vex spdx hacktoberfest attestation bill-of-materials software-bill-of-materials purl package-url sbom software-library cyclonedx obom mbom saasbom cbom

UpdatedMar 13, 2025
Python

nikstur /bombon

Star78

Nix CycloneDX Software Bills of Materials (SBOMs)

components nix nixos bom dependencies license spdx bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator

UpdatedMar 17, 2025
Rust

package-url /packageurl-python

Star73

Python implementation of the package url spec. This project is sponsored by NLnet projecthttps://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

python library hacktoberfest purl package-url