scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

javascript chrome-extension security scanner grunt-plugins firefox-extension build-tool vulnerabilities software-composition-analysis vulnerable-libraries insecure-libraries sbom sbom-generator sbom-tool

• Updated Nov 11, 2026
• JavaScript

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

python security vulnerability vulnerabilities cve hacktoberfest cvss security-automation security-tools devsecops system-tools sbom swrepo sbom-tool

• Updated Nov 12, 2026
• Python

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

exploit subdomain vulnerability sbom cyclonedx arpsyndicate sbom-tool cyclonedx-sbom

• Updated Oct 24, 2026
• Python

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool

• Updated Nov 11, 2026
• Python

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

python environment poetry conda owasp python3 pip bom spdx hacktoberfest requirements bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

• Updated Nov 4, 2026
• Python

SBOM, provenance, dependency graph, and vulnerability tools for Nix.

python security nix static-analysis dependencies cpe software-supply-chain vulnerability-scanners bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator software-supply-chain-security spdx-sbom sbom-tool

• Updated Nov 11, 2026
• Python

sbomqs: The Comprehensive SBOM Quality & Compliance Tool

go golang spdx security-tools sbom cyclonedx devsecops-pipeline supply-chain-security sbom-examples sbom-tool sbom-quality sbom-score sbom-samples

• Updated Nov 9, 2026
• Go

Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.

vex spdx appsec post-quantum-cryptography vulnerability-management sarif oss-compliance licence-management security-compliance sbom pqc cyclonedx software-supply-chain-security sbom-tool sbom-quality aibom cbom cryptographic-inventory eu-ai-act cyber-resilience-act

• Updated Nov 11, 2026
• Rust

Enrich SBOMs with data from third party services

snyk sbom cyclonedx sbom-tool

• Updated Sep 21, 2026
• Go

Utility that provides an API platform for validating, querying and managing BOM data

owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality

• Updated Nov 6, 2026
• Go

A toolset for dealing with Cryptography Bill of Materials (CBOM)

cryptography post-quantum-cryptography quantum-safe post-quantum sbom sbom-tool crypto-scanner cbom cryptographic-inventory cbom-tool cryptography-bom cbomkit

• Updated Oct 13, 2026
• Java

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

nodejs npm node dependency-graph owasp bom hacktoberfest bill-of-materials software-bill-of-materials sbom cyclonedx sbom-generator sbom-tool

• Updated Nov 11, 2026
• JavaScript

creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects

nodejs node dependency-graph bom metapackage meta-package software-bill-of-materials sbom cyclonedx sbom-generator sbom-tool

• Updated Oct 10, 2026

sbomasm: The Complete SBOM Management Toolkit

go golang security oss spdx devsecops sbom gomodule cyclonedx sbom-generator sbom-tool

• Updated Nov 9, 2026
• Go

Deptective automatically determines the native dependencies required to run any arbitrary program or command.

dependency-analysis sbom sbom-tool

• Updated Oct 28, 2026
• Python

ReARM - Release Governance Platform

security supply-chain release vulnerability release-automation release-management software-supply-chain security-tools supply-chain-management release-engineering sbom cyclonedx supply-chain-visibility sbom-distribution software-supply-chain-security sbom-tool hardware-supplychain software-transparency cyclonedx-sbom

• Updated Nov 11, 2026
• Java

Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.

compliance spdx software-bill-of-materials sbom supply-chain-security sbom-tool ntia

• Updated Nov 9, 2026
• Python

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

cryptography sonarqube sonar post-quantum-cryptography quantum-safe post-quantum sbom sbom-tool crypto-scanner cbom cryptographic-inventory cbom-tool cryptography-bom cbomkit

• Updated Nov 11, 2026
• Java

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

php composer dependency-graph owasp bom composer-plugin spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

• Updated Oct 17, 2026
• PHP

A tool to automatically detect copy+pasted and vendored code between repositories

program-analysis plagiarism-detection sbom sbom-tool

• Updated Oct 23, 2026
• Python