Do You Need an SBOM?

• bom-examples

  1 153 2.2

  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)

  

We won't dive deep, but here's a component listing for the @babel/polyfill NodeJS module from the ProtonMail web client's SBOM in CycloneDX's examples repository. It provides a variety of information about the component, including a published hash for that release that can be used to verify the authenticity of the component.

• Babel (Formerly 6to5)

  59 42,966 9.7 TypeScript

  🐠 Babel is a compiler for writing next generation JavaScript.

  

• SurveyJS

  surveyjs.io featured

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• cyclonedx-maven-plugin

  12 275 8.3 Java

  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  

There are a number of SBOM standards, but we'll focus on the CycloneDX standard here. CycloneDX grew out of the Open Web Application Security Project (OWASP), is licensed under Creative Commons Zero v1 (think a "public domain" license formulated to meet the laws of many countries), and is a widely known and respected standard.

• babel-sublime

  146 3,255 0.0 JavaScript

  Syntax definitions for ES6 JavaScript with React JSX extensions.

  

Suggest a related project