purl

There are 64 repositories under purl topic.

  • dependency-track

    DependencyTrack/dependency-track

    Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

    Language:Java3.2k732.3k672

  • aboutcode-org/scancode-toolkit

    :mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

    Language:Python2.4k693k604

  • package-url/purl-spec

    A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

    Language:Python87532295198
  • cdxgen

    CycloneDX/cdxgen

    Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

    Language:JavaScript78515933214

  • aboutcode-org/vulnerablecode

    A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

    Language:Python630221.1k238
  • cyclonedx-cli

    CycloneDX/cyclonedx-cli

    CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

    Language:C#4041417570
  • cyclonedx-maven-plugin

    CycloneDX/cyclonedx-maven-plugin

    Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

    Language:Java3321421194
  • cyclonedx-python

    CycloneDX/cyclonedx-python

    CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

    Language:Python3251219978

  • aboutcode-org/aboutcode

    AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code. Get started at https://aboutcode.readthedocs.io/

    Language:Batchfile2403063176
  • cyclonedx-dotnet

    CycloneDX/cyclonedx-dotnet

    Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

    Language:C#23712201107

  • tiiuae/sbomnix

    A suite of utilities to help with software supply chain challenges on nix targets

    Language:Python20082429
  • cyclonedx-gradle-plugin

    CycloneDX/cyclonedx-gradle-plugin

    Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

    Language:Java1991017187

  • aboutcode-org/scancode.io

    ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

    Language:Python149121.1k113
  • cyclonedx-rust-cargo

    CycloneDX/cyclonedx-rust-cargo

    Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

    Language:Rust142910250

  • AppThreat/vulnerability-db

    Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers.

    Language:Python129610925
  • sbom-utility

    CycloneDX/sbom-utility

    Utility that provides an API platform for validating, querying and managing BOM data

    Language:Go11975518

  • nikstur/bombon

    Nix CycloneDX Software Bills of Materials (SBOMs)

    Language:Rust9841712
  • cyclonedx-core-java

    CycloneDX/cyclonedx-core-java

    CycloneDX SBOM Model and Utils for Creating and Validating BOMs

    Language:Java96710877
  • cyclonedx-python-lib

    CycloneDX/cyclonedx-python-lib

    Python implementation of OWASP CycloneDX

    Language:Python861220854

  • package-url/packageurl-python

    Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

    Language:Python7978747
  • cyclonedx-php-composer

    CycloneDX/cyclonedx-php-composer

    Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

    Language:PHP734827

  • package-url/packageurl-go

    Go implementation of the package url spec

    Language:Go6312751

  • aboutcode-org/purldb

    Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

    Language:HTML521039036
  • orca

    kube-security/orca

    This repository contains the container image scanning tool ORCA

    Language:Python41

  • package-url/packageurl-java

    Java/JVM implementation of the package url spec

    Language:Java4163120
  • cyclonedx-web-tool

    CycloneDX/cyclonedx-web-tool

    A web based tool for working with CycloneDX BOMs

    Language:HTML393167

  • aboutcode-org/univers

    Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

    Language:Python3787919

  • aboutcode-org/dejacode

    Automate open source license compliance and ensure software supply chain integrity

    Language:Python34817014

  • VexStore/fatbom

    fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool's strength.

    Language:Go33241
  • cyclonedx-ruby-gem

    CycloneDX/cyclonedx-ruby-gem

    Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

    Language:Ruby304919

  • package-url/packageurl-js

    JavaScript implementation of the package url spec

    Language:JavaScript2833422
  • cyclonedx-webpack-plugin

    CycloneDX/cyclonedx-webpack-plugin

    Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

    Language:JavaScript2745510
  • cyclonedx-conan

    CycloneDX/cyclonedx-conan

    Creates CycloneDX Software Bill of Materials (SBOM) documents for C/C++ projects using Conan

    Language:Python2641315

  • package-url/packageurl-swift

    Swift implementation of the package url spec

    Language:Swift23101

  • package-url/packageurl-dotnet

    .NET implementation of the package url spec

    Language:C#161912

  • louib/nix2sbom

    nix2sbom extracts the CycloneDX and SPDX SBOM (Software Bill of Materials) from a Nix derivation

    Language:Rust153201