CycloneDX repositories

66 repositories

cyclonedx-php-composer
Public
Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
php composer dependency-graph
php composer dependency-graph owasp bom composer-plugin spdx hacktoberfest bill-of-materials software-bill-of-materials
PHP
•
Apache License 2.0
•7•87•19•2•Updated Aug 29, 2026Aug 29, 2026
cyclonedx-webpack-plugin
Public
Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
javascript webpack webpack-plugin
javascript webpack webpack-plugin owasp bom spdx hacktoberfest bill-of-materials software-bill-of-materials purl
TypeScript
•
Apache License 2.0
•11•30•12•11•Updated Aug 29, 2026Aug 29, 2026
cyclonedx-javascript-library
Public
Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
json library node
json library node web xml owasp bom vex vdr spdx
TypeScript
•
Apache License 2.0
•17•24•16•15•Updated Aug 29, 2026Aug 29, 2026
cyclonedx-maven-plugin
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects
maven owasp maven-plugin
maven owasp maven-plugin bom vex spdx bill-of-materials software-bill-of-materials purl package-url
Java
•
Apache License 2.0
•104•383•85•9•Updated Aug 29, 2026Aug 29, 2026
guides
Public
CSS
•
Creative Commons Attribution 4.0 International
•12•7•14•15•Updated Aug 29, 2026Aug 29, 2026
specification
Public
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM,…
machine-learning supply-chain owasp
machine-learning supply-chain owasp specification standard bom software vex license spdx
XSLT
•
Apache License 2.0
•92•543•177•34•Updated Aug 29, 2026Aug 29, 2026
cyclonedx-php-library
Public
Functionality and DataModels of OWASP CycloneDX for PHP
php library owasp
php library owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials sbom
PHP
•
Apache License 2.0
•0•13•18•7•Updated Aug 29, 2026Aug 29, 2026
cyclonedx-node-yarn
Public
Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.
nodejs node yarn
nodejs node yarn bom hacktoberfest bill-of-materials software-bill-of-materials sbom cyclonedx yarn-plugin
JavaScript
•
Apache License 2.0
•11•26•13•15•Updated Aug 28, 2026Aug 28, 2026
cyclonedx-core-java
Public
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
library owasp bom
library owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom
Java
•
Apache License 2.0
•90•118•39•15•Updated Aug 28, 2026Aug 28, 2026
cyclonedx-gomod
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
golang owasp bom
golang owasp bom vex bill-of-materials software-bill-of-materials go-modules sbom sbom-generator obom
Go
•
Apache License 2.0
•38•186•33•7•Updated Aug 28, 2026Aug 28, 2026
cyclonedx-gradle-plugin
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects
gradle owasp gradle-plugin
gradle owasp gradle-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom
Java
•
Apache License 2.0
•103•236•71•12•Updated Aug 28, 2026Aug 28, 2026
tool-center
Public
Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services
owasp vex vdr
owasp vex vdr sbom cyclonedx obom mbom saasbom mlbom software-transparency
HTML
•
Creative Commons Attribution Share Alike 4.0 International
•70•20•3•5•Updated Aug 26, 2026Aug 26, 2026
cyclonedx-node-npm
Public
Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
nodejs npm node
nodejs npm node dependency-graph owasp bom hacktoberfest bill-of-materials software-bill-of-materials sbom
JavaScript
•
Apache License 2.0
•29•149•14•9•Updated Aug 24, 2026Aug 24, 2026
cyclonedx-esbuild
Public
Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.
javascript owasp bom
javascript owasp bom spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom
TypeScript
•
Apache License 2.0
•4•6•11•12•Updated Aug 24, 2026Aug 24, 2026
cyclonedx-property-taxonomy
Public
A taxonomy of all official CycloneDX property namespaces and names
registry taxonomy cyclonedx
registry taxonomy cyclonedx
Ruby
•
Apache License 2.0
•46•25•23•7•Updated Aug 24, 2026Aug 24, 2026
homebrew-cyclonedx
Public
CycloneDX Homebrew Tap
Ruby
•
Apache License 2.0
•2•1•0•0•Updated Aug 24, 2026Aug 24, 2026
cyclonedx-ruby-gem
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects
ruby bundler gem
ruby bundler gem owasp bom vex spdx bill-of-materials software-bill-of-materials purl
Ruby
•
Apache License 2.0
•21•36•12•20•Updated Aug 22, 2026Aug 22, 2026
cyclonedx-go
Public
Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)
golang library owasp
golang library owasp bom vex bill-of-materials software-bill-of-materials sbom obom mbom
Go
•
Apache License 2.0
•46•117•15•10•Updated Aug 22, 2026Aug 22, 2026
cyclonedx-python
Public
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
python environment poetry
python environment poetry conda owasp python3 pip bom spdx hacktoberfest
Python
•
Apache License 2.0
•97•390•23•19•Updated Aug 22, 2026Aug 22, 2026
cyclonedx-cli
Public
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
owasp bom vex
owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx
C#
•
Apache License 2.0
•81•539•110•15•Updated Aug 20, 2026Aug 20, 2026
cyclonedx-assessors-studio
Public
Assessors Studio operationalizes CycloneDX Attestations (CDXA): perform assessments, collect evidence, make claims, and issue machine-readable CycloneDX attesta…
standards regulation pci-dss
standards regulation pci-dss procurement grc attestation ssdf evidence cra claims
TypeScript
•
Apache License 2.0
•1•17•4•23•Updated Aug 16, 2026Aug 16, 2026
official-3rd-party-standards
Public
A collection of machine-readable third-party standards and requirements in CycloneDX format
standard compliance requirements
standard compliance requirements maturity-model security-requirements compliance-automation
Python
•
Apache License 2.0
•4•9•2•3•Updated Aug 14, 2026Aug 14, 2026
cyclonedx-python-lib
Public
Functionality and DataModels of OWASP CycloneDX for Python
python library owasp
python library owasp bom vex spdx hacktoberfest attestation bill-of-materials software-bill-of-materials
Python
•
Apache License 2.0
•67•115•33•27•Updated Aug 13, 2026Aug 13, 2026
transparency-exchange-api
Public
A standard API specification for exchanging supply chain artifacts and intelligence
owasp specification bom
owasp specification bom spdx spdx-license bill-of-materials software-bill-of-materials api-spec sbom cyclonedx
Shell
•
Apache License 2.0
•22•113•52•8•Updated Aug 12, 2026Aug 12, 2026
cyclonedx-dotnet
Public
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
dotnet owasp bom
dotnet owasp bom dotnet-core vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl
C#
•
Apache License 2.0
•123•291•42•22•Updated Aug 11, 2026Aug 11, 2026
cdxgen-packages
Public
internal repo for sycing/publishing packages for cdxgen
Shell
•0•0•0•0•Updated Aug 8, 2026Aug 8, 2026
cyclonedx-node-module
Public
creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects
nodejs node dependency-graph
nodejs node dependency-graph bom metapackage meta-package software-bill-of-materials sbom cyclonedx sbom-generator
Apache License 2.0
•39•144•1•4•Updated Aug 8, 2026Aug 8, 2026
cyclonedx-npmjs-reserved-packages
Public
Defensive placeholder packages to prevent name squatting on npmjs. Official packages are under @cyclonedx/*.
Apache License 2.0
•0•1•0•3•Updated Aug 8, 2026Aug 8, 2026
sbom-utility
Public
Utility that provides an API platform for validating, querying and managing BOM data
owasp bom vex
owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl
Go
•
Apache License 2.0
•21•162•28•4•Updated Aug 4, 2026Aug 4, 2026
cyclonedx-sign-javascript
Public
Javascript implementation of JSON Signature Format (JSF), JSON Signature Scheme (JSS), and JSON Canonicalization Scheme (JCS)
json signing cyclonedx
json signing cyclonedx json-signing
TypeScript
•
Apache License 2.0
•0•2•0•2•Updated Jul 31, 2026Jul 31, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Navigation Menu

CycloneDX BOM Standard

All

66 repositories

cyclonedx-php-composer

cyclonedx-webpack-plugin

cyclonedx-javascript-library

cyclonedx-maven-plugin

guides

specification

cyclonedx-php-library

cyclonedx-node-yarn

cyclonedx-core-java

cyclonedx-gomod

cyclonedx-gradle-plugin

tool-center

cyclonedx-node-npm

cyclonedx-esbuild

cyclonedx-property-taxonomy

homebrew-cyclonedx

cyclonedx-ruby-gem

cyclonedx-go

cyclonedx-python

cyclonedx-cli

cyclonedx-assessors-studio

official-3rd-party-standards

cyclonedx-python-lib

transparency-exchange-api

cyclonedx-dotnet

cdxgen-packages

cyclonedx-node-module

cyclonedx-npmjs-reserved-packages

sbom-utility

cyclonedx-sign-javascript

Repositories list

66 repositories