GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

GeezerVison is showing github.com — OWASP cdxgen

README.md

cdxgen

cdxgen is an OWASP project that creates CycloneDX Bills of Materials for source code, container images, binaries and live systems: SBOM, CBOM, OBOM, SaaSBOM and more. Read the documentation to get started.

npm install -g @cdxgen/cdxgen

Repositories

Repository	What it is
cdxgen	The BOM generator: CLI, library, HTTP server and REPL
cdxgen-plugins-bin	Native helper binaries that cdxgen uses for deeper analysis
cdx-purl	Strict package-url parser and builder for Node.js
cdx-proto	Read and write CycloneDX BOMs as protocol buffers
cdx-hbom	Hardware Bill of Materials library
safer-exec	OS-level sandboxing with tracing and auditing for any binary
caxa	Packages Node.js applications into single executables

Getting involved

Ask questions and share ideas in Discussions.
Read the contributing guide before opening a pull request.
Report vulnerabilities privately, as described in the security policy.

We build cdxgen with the help of AI coding agents and say so openly. Each repository has an AI-DECLARATION.md that describes how AI is used there, and pull requests made with AI carry an ai-* label for the level of AI involvement.

Pinned Loading

cdxgen cdxgen Public

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submissio…

JavaScript 1.1k 268
caxa caxa Public

Package Node.js applications into executable binaries.

Rust 13
cdxgen-plugins-bin cdxgen-plugins-bin Public

Binary plugins for @cyclonedx/cdxgen npm package

JavaScript 5 4
safer-exec safer-exec Public

OS-level sandboxing with tracing, auditing, and learning mode for arbitrary binaries.

Go 6

Repositories

Loading

Type

All Public Sources Forks Archived Mirrors Templates

Language

All Go JavaScript Rust TypeScript

Sort

Last updated Name Stars

Showing 8 of 8 repositories

cdxgen Public
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

cdxgen/cdxgen's past year of commit activity

JavaScript 1,114 Apache-2.0 268 386 (20 issues need help) 0 Updated Nov 12, 2026
cdxgen-plugins-bin Public
Binary plugins for @cyclonedx/cdxgen npm package

cdxgen/cdxgen-plugins-bin's past year of commit activity

JavaScript 5 MIT 4 42 0 Updated Nov 11, 2026
.github Public
Default community health files for the cdxgen organization

cdxgen/.github's past year of commit activity

JavaScript 0 Apache-2.0 0 0 0 Updated Nov 11, 2026
cdx-hbom Public
Hardware Bill-of-Materials (HBOM) library.

cdxgen/cdx-hbom's past year of commit activity

JavaScript 0 MIT 1 5 0 Updated Nov 6, 2026
caxa Public
Package Node.js applications into executable binaries.

cdxgen/caxa's past year of commit activity

Rust 13 MIT 0 1 0 Updated Oct 30, 2026
safer-exec Public
OS-level sandboxing with tracing, auditing, and learning mode for arbitrary binaries.

cdxgen/safer-exec's past year of commit activity

Go 6 MIT 0 0 0 Updated Oct 30, 2026
cdx-purl Public
Strict, definition-driven package-url parser/builder for Node.js.

cdxgen/cdx-purl's past year of commit activity

JavaScript 1 MIT 0 0 0 Updated Oct 30, 2026
cdx-proto Public
Runtime library to serialize/deserialize CycloneDX BOM with protocol buffers

cdxgen/cdx-proto's past year of commit activity

TypeScript 0 MIT 0 0 0 Updated Oct 30, 2026

People

Top languages

JavaScript Go Rust TypeScript

Most used topics

cyclonedx sbom package-url purl

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.