Repositories list

• cyclonedx-buildroot

  Public
  Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

  bombuildrootbill-of-materials+ 5

  bombuildrootbill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-generatorsbom-tool

  Python

  •

  Apache License 2.0

  •88 forks in CycloneDX/cyclonedx-buildroot•1717 stars in CycloneDX/cyclonedx-buildroot•11 issue in CycloneDX/cyclonedx-buildroot•00 pull requests in CycloneDX/cyclonedx-buildroot•Updated Nov 9, 2026Nov 9, 2026

• cyclonedx-python-lib

  Public
  Functionality and DataModels of OWASP CycloneDX for Python

  pythonlibraryowasp+ 16

  pythonlibraryowaspbomvexspdxhacktoberfestattestationbill-of-materialssoftware-bill-of-materials+ 9

  Python

  •

  Apache License 2.0

  •6767 forks in CycloneDX/cyclonedx-python-lib•115115 stars in CycloneDX/cyclonedx-python-lib•3333 issues in CycloneDX/cyclonedx-python-lib•3232 pull requests in CycloneDX/cyclonedx-python-lib•Updated Nov 7, 2026Nov 7, 2026

• cyclonedx-node-npm

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  nodejsnpmnode+ 10

  nodejsnpmnodedependency-graphowaspbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 3

  JavaScript

  •

  Apache License 2.0

  •3030 forks in CycloneDX/cyclonedx-node-npm•151151 stars in CycloneDX/cyclonedx-node-npm•1515 issues in CycloneDX/cyclonedx-node-npm•1212 pull requests in CycloneDX/cyclonedx-node-npm•Updated Nov 7, 2026Nov 7, 2026

• cyclonedx-node-yarn

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

  nodejsnodeyarn+ 9

  nodejsnodeyarnbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbomcyclonedxyarn-plugin+ 2

  JavaScript

  •

  Apache License 2.0

  •1111 forks in CycloneDX/cyclonedx-node-yarn•2727 stars in CycloneDX/cyclonedx-node-yarn•1313 issues in CycloneDX/cyclonedx-node-yarn•3131 pull requests in CycloneDX/cyclonedx-node-yarn•Updated Nov 7, 2026Nov 7, 2026

• cyclonedx-webpack-plugin

  Public
  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  javascriptwebpackwebpack-plugin+ 13

  javascriptwebpackwebpack-pluginowaspbomspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 6

  TypeScript

  •

  Apache License 2.0

  •1111 forks in CycloneDX/cyclonedx-webpack-plugin•3131 stars in CycloneDX/cyclonedx-webpack-plugin•1313 issues in CycloneDX/cyclonedx-webpack-plugin•1212 pull requests in CycloneDX/cyclonedx-webpack-plugin•Updated Nov 7, 2026Nov 7, 2026

• cyclonedx-javascript-library

  Public

  CycloneDX/cyclonedx-javascript-library’s past year of commit activity
  Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

  jsonlibrarynode+ 16

  jsonlibrarynodewebxmlowaspbomvexvdrspdx+ 9

  TypeScript

  •

  Apache License 2.0

  •1616 forks in CycloneDX/cyclonedx-javascript-library•2626 stars in CycloneDX/cyclonedx-javascript-library•1717 issues in CycloneDX/cyclonedx-javascript-library•1717 pull requests in CycloneDX/cyclonedx-javascript-library•Updated Nov 7, 2026Nov 7, 2026

• guides

  Public
  CSS

  •

  Creative Commons Attribution 4.0 International

  •1313 forks in CycloneDX/guides•1010 stars in CycloneDX/guides•1414 issues in CycloneDX/guides•2828 pull requests in CycloneDX/guides•Updated Nov 7, 2026Nov 7, 2026

• cyclonedx-property-taxonomy

  Public
  A taxonomy of all official CycloneDX property namespaces and names

  registrytaxonomycyclonedx

  registrytaxonomycyclonedx

  Ruby

  •

  Apache License 2.0

  •5050 forks in CycloneDX/cyclonedx-property-taxonomy•2828 stars in CycloneDX/cyclonedx-property-taxonomy•3131 issues in CycloneDX/cyclonedx-property-taxonomy•88 pull requests in CycloneDX/cyclonedx-property-taxonomy•Updated Nov 7, 2026Nov 7, 2026

• specification

  Public
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM,…

  machine-learningsupply-chainowasp+ 17

  machine-learningsupply-chainowaspspecificationstandardbomsoftwarevexlicensespdx+ 10

  XSLT

  •

  Apache License 2.0

  •9595 forks in CycloneDX/specification•574574 stars in CycloneDX/specification•188188 issues in CycloneDX/specification•5050 pull requests in CycloneDX/specification•Updated Nov 7, 2026Nov 7, 2026

• cyclonedx-esbuild

  Public

  CycloneDX/cyclonedx-esbuild’s past year of commit activity
  Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.

  javascriptowaspbom+ 15

  javascriptowaspbomspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 8

  TypeScript

  •

  Apache License 2.0

  •44 forks in CycloneDX/cyclonedx-esbuild•66 stars in CycloneDX/cyclonedx-esbuild•1111 issues in CycloneDX/cyclonedx-esbuild•1414 pull requests in CycloneDX/cyclonedx-esbuild•Updated Nov 7, 2026Nov 7, 2026

• sbom-utility

  Public
  Utility that provides an API platform for validating, querying and managing BOM data

  owaspbomvex+ 16

  owaspbomvexvdrspdxspdx-licensehacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 9

  Go

  •

  Apache License 2.0

  •2727 forks in CycloneDX/sbom-utility•168168 stars in CycloneDX/sbom-utility•2626 issues in CycloneDX/sbom-utility•99 pull requests in CycloneDX/sbom-utility•Updated Nov 6, 2026Nov 6, 2026

• cyclonedx-rust-cargo

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  rustowaspcargo+ 14

  rustowaspcargobomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-url+ 7

  Rust

  •

  Apache License 2.0

  •6969 forks in CycloneDX/cyclonedx-rust-cargo•184184 stars in CycloneDX/cyclonedx-rust-cargo•3838 issues in CycloneDX/cyclonedx-rust-cargo•88 pull requests in CycloneDX/cyclonedx-rust-cargo•Updated Nov 6, 2026Nov 6, 2026

• cyclonedx-gradle-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  gradleowaspgradle-plugin+ 9

  gradleowaspgradle-pluginbomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 2

  Java

  •

  Apache License 2.0

  •105105 forks in CycloneDX/cyclonedx-gradle-plugin•240240 stars in CycloneDX/cyclonedx-gradle-plugin•7171 issues in CycloneDX/cyclonedx-gradle-plugin•2323 pull requests in CycloneDX/cyclonedx-gradle-plugin•Updated Nov 6, 2026Nov 6, 2026

• official-3rd-party-standards

  Public
  A collection of machine-readable third-party standards and requirements in CycloneDX format

  standardcompliancerequirements+ 3

  standardcompliancerequirementsmaturity-modelsecurity-requirementscompliance-automation

  Python

  •

  Apache License 2.0

  •44 forks in CycloneDX/official-3rd-party-standards•99 stars in CycloneDX/official-3rd-party-standards•22 issues in CycloneDX/official-3rd-party-standards•33 pull requests in CycloneDX/official-3rd-party-standards•Updated Nov 6, 2026Nov 6, 2026

• tool-center

  Public
  Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

  owaspvexvdr+ 11

  owaspvexvdrsbomcyclonedxobommbomsaasbommlbomsoftware-transparency+ 4

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •107107 forks in CycloneDX/tool-center•2626 stars in CycloneDX/tool-center•22 issues in CycloneDX/tool-center•1919 pull requests in CycloneDX/tool-center•Updated Nov 5, 2026Nov 5, 2026

• cyclonedx-python

  Public
  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonenvironmentpoetry+ 16

  pythonenvironmentpoetrycondaowasppython3pipbomspdxhacktoberfest+ 9

  Python

  •

  Apache License 2.0

  •105105 forks in CycloneDX/cyclonedx-python•401401 stars in CycloneDX/cyclonedx-python•2020 issues in CycloneDX/cyclonedx-python•1313 pull requests in CycloneDX/cyclonedx-python•Updated Nov 4, 2026Nov 4, 2026

• cyclonedx-bom-repo-server

  Public
  A BOM repository server for distributing CycloneDX BOMs

  owaspbomvex+ 9

  owaspbomvexbill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-distributionsbom-repositoryobom+ 2

  C#

  •

  Apache License 2.0

  •1414 forks in CycloneDX/cyclonedx-bom-repo-server•8989 stars in CycloneDX/cyclonedx-bom-repo-server•55 issues in CycloneDX/cyclonedx-bom-repo-server•1111 pull requests in CycloneDX/cyclonedx-bom-repo-server•Updated Nov 4, 2026Nov 4, 2026

• cyclonedx-gomod

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

  golangowaspbom+ 9

  golangowaspbomvexbill-of-materialssoftware-bill-of-materialsgo-modulessbomsbom-generatorobom+ 2

  Go

  •

  Apache License 2.0

  •4141 forks in CycloneDX/cyclonedx-gomod•193193 stars in CycloneDX/cyclonedx-gomod•3535 issues in CycloneDX/cyclonedx-gomod•1717 pull requests in CycloneDX/cyclonedx-gomod•Updated Nov 3, 2026Nov 3, 2026

• cyclonedx-core-java

  Public
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  libraryowaspbom+ 11

  libraryowaspbomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 4

  Java

  •

  Apache License 2.0

  •9797 forks in CycloneDX/cyclonedx-core-java•122122 stars in CycloneDX/cyclonedx-core-java•2525 issues in CycloneDX/cyclonedx-core-java•1616 pull requests in CycloneDX/cyclonedx-core-java•Updated Nov 3, 2026Nov 3, 2026

• cyclonedx-maven-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  mavenowaspmaven-plugin+ 13

  mavenowaspmaven-pluginbomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-url+ 6

  Java

  •

  Apache License 2.0

  •115115 forks in CycloneDX/cyclonedx-maven-plugin•388388 stars in CycloneDX/cyclonedx-maven-plugin•8888 issues in CycloneDX/cyclonedx-maven-plugin•1818 pull requests in CycloneDX/cyclonedx-maven-plugin•Updated Nov 2, 2026Nov 2, 2026

• cyclonedx-go

  Public
  Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  golanglibraryowasp+ 8

  golanglibraryowaspbomvexbill-of-materialssoftware-bill-of-materialssbomobommbom+ 1

  Go

  •

  Apache License 2.0

  •5151 forks in CycloneDX/cyclonedx-go•119119 stars in CycloneDX/cyclonedx-go•1818 issues in CycloneDX/cyclonedx-go•1919 pull requests in CycloneDX/cyclonedx-go•Updated Oct 30, 2026Oct 30, 2026

• homebrew-cyclonedx

  Public
  CycloneDX Homebrew Tap

  Ruby

  •

  Apache License 2.0

  •22 forks in CycloneDX/homebrew-cyclonedx•11 star in CycloneDX/homebrew-cyclonedx•00 issues in CycloneDX/homebrew-cyclonedx•00 pull requests in CycloneDX/homebrew-cyclonedx•Updated Oct 28, 2026Oct 28, 2026

• transparency-exchange-api

  Public
  A standard API specification for exchanging supply chain artifacts and intelligence

  owaspspecificationbom+ 9

  owaspspecificationbomspdxspdx-licensebill-of-materialssoftware-bill-of-materialsapi-specsbomcyclonedx+ 2

  Shell

  •

  Apache License 2.0

  •2424 forks in CycloneDX/transparency-exchange-api•122122 stars in CycloneDX/transparency-exchange-api•4949 issues in CycloneDX/transparency-exchange-api•1111 pull requests in CycloneDX/transparency-exchange-api•Updated Oct 21, 2026Oct 21, 2026

• cyclonedx-cli

  Public
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

  owaspbomvex+ 11

  owaspbomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedx+ 4

  C#

  •

  Apache License 2.0

  •8787 forks in CycloneDX/cyclonedx-cli•556556 stars in CycloneDX/cyclonedx-cli•112112 issues in CycloneDX/cyclonedx-cli•2222 pull requests in CycloneDX/cyclonedx-cli•Updated Oct 19, 2026Oct 19, 2026

• cyclonedx-dotnet

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

  dotnetowaspbom+ 14

  dotnetowaspbomdotnet-corevexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 7

  C#

  •

  Apache License 2.0

  •127127 forks in CycloneDX/cyclonedx-dotnet•300300 stars in CycloneDX/cyclonedx-dotnet•4545 issues in CycloneDX/cyclonedx-dotnet•2121 pull requests in CycloneDX/cyclonedx-dotnet•Updated Oct 18, 2026Oct 18, 2026

• cyclonedx-php-composer

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  phpcomposerdependency-graph+ 13

  phpcomposerdependency-graphowaspbomcomposer-pluginspdxhacktoberfestbill-of-materialssoftware-bill-of-materials+ 6

  PHP

  •

  Apache License 2.0

  •77 forks in CycloneDX/cyclonedx-php-composer•8989 stars in CycloneDX/cyclonedx-php-composer•1919 issues in CycloneDX/cyclonedx-php-composer•77 pull requests in CycloneDX/cyclonedx-php-composer•Updated Oct 17, 2026Oct 17, 2026

• cyclonedx-ruby-gem

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

  rubybundlergem+ 14

  rubybundlergemowaspbomvexspdxbill-of-materialssoftware-bill-of-materialspurl+ 7

  Ruby

  •

  Apache License 2.0

  •2121 forks in CycloneDX/cyclonedx-ruby-gem•3535 stars in CycloneDX/cyclonedx-ruby-gem•1212 issues in CycloneDX/cyclonedx-ruby-gem•2323 pull requests in CycloneDX/cyclonedx-ruby-gem•Updated Oct 17, 2026Oct 17, 2026

• cyclonedx-php-library

  Public
  Functionality and DataModels of OWASP CycloneDX for PHP

  phplibraryowasp+ 12

  phplibraryowaspbomvexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 5

  PHP

  •

  Apache License 2.0

  •00 forks in CycloneDX/cyclonedx-php-library•1313 stars in CycloneDX/cyclonedx-php-library•1818 issues in CycloneDX/cyclonedx-php-library•1212 pull requests in CycloneDX/cyclonedx-php-library•Updated Oct 17, 2026Oct 17, 2026

• cyclonedx-npmjs-reserved-packages

  Public
  Defensive placeholder packages to prevent name squatting on npmjs. Official packages are under @cyclonedx/*.

  Apache License 2.0

  •00 forks in CycloneDX/cyclonedx-npmjs-reserved-packages•11 star in CycloneDX/cyclonedx-npmjs-reserved-packages•00 issues in CycloneDX/cyclonedx-npmjs-reserved-packages•33 pull requests in CycloneDX/cyclonedx-npmjs-reserved-packages•Updated Oct 17, 2026Oct 17, 2026

• cyclonedx-node-module

  Public
  creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects

  nodejsnodedependency-graph+ 8

  nodejsnodedependency-graphbommetapackagemeta-packagesoftware-bill-of-materialssbomcyclonedxsbom-generator+ 1

  Apache License 2.0

  •4040 forks in CycloneDX/cyclonedx-node-module•145145 stars in CycloneDX/cyclonedx-node-module•11 issue in CycloneDX/cyclonedx-node-module•44 pull requests in CycloneDX/cyclonedx-node-module•Updated Oct 10, 2026Oct 10, 2026