spdx topic

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nl...

nexB

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-...

tern-tools

Various data formats for the SPDX License List including RDFa, HTML, Text, and JSON

spdx

A suite of tools to automate software compliance checks.

oss-review-toolkit

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and we...

fossology

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and V...

CycloneDX

write licenses to stdout

raftario

The SPDX specification in MarkDown and HTML formats.

spdx

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

CycloneDX

A utility to generate SPDX-compliant Bill of Materials manifests

kubernetes-sigs