Top 5 obom Open-Source Projects

cyclonedx-maven-plugin

12 275 8.3 Java

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

Project mention: Best Practices for Adopting Open-Source Software in 2024 | dev.to | 2024-05-17

SPDX17 is an open standard developed by the Linux Foundation to communicate details of a SBOM, including components, licenses, copyrights, and security references, recognised internationally as ISO/IEC 5962:202118 (System Package Data Exchange (SPDX®) 2024). CycloneDX19, originating from the Open Web Application Security Project (OWASP) community, is an SBOM standard crafted for application security and supply chain component analysis, now extended to encompass a broader array of applications such as software-as-a-service BOM (SaaSBOM) (CycloneDX 2024).

bom-examples

1 153 2.2

A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)

Project mention: Do You Need an SBOM? | dev.to | 2024-05-06

We won't dive deep, but here's a component listing for the @babel/polyfill NodeJS module from the ProtonMail web client's SBOM in CycloneDX's examples repository. It provides a variety of information about the component, including a published hash for that release that can be used to verify the authenticity of the component.

InfluxDB

www.influxdata.com featured

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
cyclonedx-gomod

4 127 8.8 Go

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
cyclonedx-core-java

1 71 9.1 Java

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

Project mention: Dependency inventory / dashboard for multiple maven projects | /r/java | 2023-06-08

cyclonedx-bom-repo-server

1 64 0.0 C#

A BOM repository server for distributing CycloneDX BOMs
SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).