Repositories list

• cyclonedx-dotnet

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

  dotnetowaspbom+ 14

  dotnetowaspbomdotnet-corevexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 7

  C#

  •

  Apache License 2.0

  •120120 forks•263263 stars•4343 issues•1818 pull requests•Updated Apr 19, 2026Apr 19, 2026

• cyclonedx-dotnet-library

  Public

  CycloneDX/cyclonedx-dotnet-library’s past year of commit activity
  .NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  dotnetnugetowasp+ 10

  dotnetnugetowaspbomdotnet-corevexbill-of-materialssoftware-bill-of-materialssbomcyclonedx+ 3

  C#

  •

  Apache License 2.0

  •3232 forks•2626 stars•1717 issues•2121 pull requests•Updated Apr 19, 2026Apr 19, 2026

• cyclonedx-node-yarn

  Public

  CycloneDX/cyclonedx-node-yarn’s past year of commit activity
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

  nodejsnodeyarn+ 9

  nodejsnodeyarnbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbomcyclonedxyarn-plugin+ 2

  JavaScript

  •

  Apache License 2.0

  •99 forks•2525 stars•1515 issues•1515 pull requests•Updated Apr 19, 2026Apr 19, 2026

• cyclonedx-bom-studio

  Public

  CycloneDX/cyclonedx-bom-studio’s past year of commit activity
  Build, edit, validate, and export CycloneDX BOMs through an intuitive browser-based interface

  nodevueowasp+ 13

  nodevueowaspbomvexspdxauthoring-toolbill-of-materialssoftware-bill-of-materialspurl+ 6

  Vue

  •

  Apache License 2.0

  •66 forks•1919 stars•66 issues•1616 pull requests•Updated Apr 19, 2026Apr 19, 2026

• cyclonedx-php-composer

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  phpcomposerdependency-graph+ 13

  phpcomposerdependency-graphowaspbomcomposer-pluginspdxhacktoberfestbill-of-materialssoftware-bill-of-materials+ 6

  PHP

  •

  Apache License 2.0

  •77 forks•8282 stars•1616 issues•66 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-assessors-studio

  Public
  Assessors Studio operationalizes CycloneDX Attestations (CDXA): perform assessments, collect evidence, make claims, and issue machine-readable CycloneDX attesta…

  standardsregulationpci-dss+ 15

  standardsregulationpci-dssprocurementgrcattestationssdfevidencecraclaims+ 8

  TypeScript

  •

  Apache License 2.0

  •11 fork•1212 stars•11 issue•22 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-node-npm

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  nodejsnpmnode+ 10

  nodejsnpmnodedependency-graphowaspbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 3

  JavaScript

  •

  Apache License 2.0

  •2626 forks•132132 stars•1212 issues•1111 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-webpack-plugin

  Public

  CycloneDX/cyclonedx-webpack-plugin’s past year of commit activity
  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  javascriptwebpackwebpack-plugin+ 13

  javascriptwebpackwebpack-pluginowaspbomspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 6

  TypeScript

  •

  Apache License 2.0

  •1111 forks•3030 stars•1111 issues•1212 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-javascript-library

  Public

  CycloneDX/cyclonedx-javascript-library’s past year of commit activity
  Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

  jsonlibrarynode+ 16

  jsonlibrarynodewebxmlowaspbomvexvdrspdx+ 9

  TypeScript

  •

  Apache License 2.0

  •1616 forks•2323 stars•1414 issues•1717 pull requests•Updated Apr 18, 2026Apr 18, 2026

• specification

  Public
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM,…

  machine-learningsupply-chainowasp+ 17

  machine-learningsupply-chainowaspspecificationstandardbomsoftwarevexlicensespdx+ 10

  XSLT

  •

  Apache License 2.0

  •8484 forks•500500 stars•158158 issues•3434 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-php-library

  Public
  Functionality and DataModels of OWASP CycloneDX for PHP

  phplibraryowasp+ 12

  phplibraryowaspbomvexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 5

  PHP

  •

  Apache License 2.0

  •00 forks•1313 stars•1717 issues•1212 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-node-module

  Public
  creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects

  nodejsnodedependency-graph+ 8

  nodejsnodedependency-graphbommetapackagemeta-packagesoftware-bill-of-materialssbomcyclonedxsbom-generator+ 1

  Apache License 2.0

  •3939 forks•141141 stars•11 issue•33 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-python

  Public

  CycloneDX/cyclonedx-python’s past year of commit activity
  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonenvironmentpoetry+ 16

  pythonenvironmentpoetrycondaowasppython3pipbomspdxhacktoberfest+ 9

  Python

  •

  Apache License 2.0

  •9393 forks•371371 stars•2222 issues•1212 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-esbuild

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.

  javascriptowaspbom+ 14

  javascriptowaspbomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedx+ 7

  TypeScript

  •

  Apache License 2.0

  •22 forks•44 stars•88 issues•1111 pull requests•Updated Apr 18, 2026Apr 18, 2026

• cyclonedx-gomod

  Public

  CycloneDX/cyclonedx-gomod’s past year of commit activity
  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

  golangowaspbom+ 9

  golangowaspbomvexbill-of-materialssoftware-bill-of-materialsgo-modulessbomsbom-generatorobom+ 2

  Go

  •

  Apache License 2.0

  •3333 forks•180180 stars•3333 issues•1313 pull requests•Updated Apr 17, 2026Apr 17, 2026

• cyclonedx-core-java

  Public

  CycloneDX/cyclonedx-core-java’s past year of commit activity
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  libraryowaspbom+ 11

  libraryowaspbomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 4

  Java

  •

  Apache License 2.0

  •8282 forks•109109 stars•3939 issues•2929 pull requests•Updated Apr 17, 2026Apr 17, 2026

• cyclonedx-buildroot

  Public
  Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

  bombuildrootbill-of-materials+ 5

  bombuildrootbill-of-materialssoftware-bill-of-materialssbomcyclonedxsbom-generatorsbom-tool

  Python

  •

  Apache License 2.0

  •77 forks•1515 stars•22 issues•11 pull request•Updated Apr 17, 2026Apr 17, 2026

• guides

  Public

  CycloneDX/guides’s past year of commit activity
  CSS

  •

  Creative Commons Attribution 4.0 International

  •1111 forks•55 stars•1111 issues•44 pull requests•Updated Apr 16, 2026Apr 16, 2026

• skills

  Public
  Repository of AI skills specific to CycloneDX

  Apache License 2.0

  •22 forks•2222 stars•00 issues•11 pull request•Updated Apr 16, 2026Apr 16, 2026

• cyclonedx-python-lib

  Public
  Functionality and DataModels of OWASP CycloneDX for Python

  pythonlibraryowasp+ 16

  pythonlibraryowaspbomvexspdxhacktoberfestattestationbill-of-materialssoftware-bill-of-materials+ 9

  Python

  •

  Apache License 2.0

  •6363 forks•106106 stars•2929 issues•2020 pull requests•Updated Apr 15, 2026Apr 15, 2026

• official-3rd-party-standards

  Public
  A collection of machine-readable third-party standards and requirements in CycloneDX format

  standardcompliancerequirements+ 3

  standardcompliancerequirementsmaturity-modelsecurity-requirementscompliance-automation

  Python

  •

  Apache License 2.0

  •44 forks•66 stars•22 issues•33 pull requests•Updated Apr 15, 2026Apr 15, 2026

• cyclonedx-gradle-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  gradleowaspgradle-plugin+ 9

  gradleowaspgradle-pluginbomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 2

  Java

  •

  Apache License 2.0

  •9393 forks•221221 stars•6767 issues•1313 pull requests•Updated Apr 14, 2026Apr 14, 2026

• gh-python-generate-sbom

  Public
  GitHub action to generate a CycloneDX SBOM for Python

  pythonowasppython3+ 7

  pythonowasppython3bombill-of-materialssoftware-bill-of-materialssbomgithub-actioncyclonedxsbom-generator

  JavaScript

  •

  Apache License 2.0

  •44 forks•1414 stars•33 issues•11 pull request•Updated Apr 13, 2026Apr 13, 2026

• cdxgen-packages

  Public
  internal repo for sycing/publishing packages for cdxgen

  00 forks•00 stars•00 issues•00 pull requests•Updated Apr 9, 2026Apr 9, 2026

• tool-center

  Public

  CycloneDX/tool-center’s past year of commit activity
  Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

  owaspvexvdr+ 11

  owaspvexvdrsbomcyclonedxobommbomsaasbommlbomsoftware-transparency+ 4

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •4444 forks•1212 stars•22 issues•55 pull requests•Updated Apr 7, 2026Apr 7, 2026

• cyclonedx-cli

  Public
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

  owaspbomvex+ 11

  owaspbomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedx+ 4

  C#

  •

  Apache License 2.0

  •7676 forks•487487 stars•111111 issues•1818 pull requests•Updated Mar 31, 2026Mar 31, 2026

• cyclonedx-go

  Public
  Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  golanglibraryowasp+ 8

  golanglibraryowaspbomvexbill-of-materialssoftware-bill-of-materialssbomobommbom+ 1

  Go

  •

  Apache License 2.0

  •4141 forks•107107 stars•1414 issues•1010 pull requests•Updated Mar 30, 2026Mar 30, 2026

• transparency-exchange-api

  Public
  A standard API specification for exchanging supply chain artifacts and intelligence

  owaspspecificationbom+ 9

  owaspspecificationbomspdxspdx-licensebill-of-materialssoftware-bill-of-materialsapi-specsbomcyclonedx+ 2

  Shell

  •

  Apache License 2.0

  •2020 forks•106106 stars•5050 issues•66 pull requests•Updated Mar 25, 2026Mar 25, 2026

• cyclonedx-rust-cargo

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  rustowaspcargo+ 14

  rustowaspcargobomvexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-url+ 7

  Rust

  •

  Apache License 2.0

  •5555 forks•162162 stars•3434 issues•66 pull requests•Updated Mar 19, 2026Mar 19, 2026

• cyclonedx-property-taxonomy

  Public
  A taxonomy of all official CycloneDX property namespaces and names

  registrytaxonomycyclonedx

  registrytaxonomycyclonedx

  Ruby

  •

  Apache License 2.0

  •4242 forks•2121 stars•1515 issues•33 pull requests•Updated Mar 2, 2026Mar 2, 2026