#spdx (20 Repositories)
Ranked open-source repositories tagged with #spdx, scored by pull request acceptance likelihood and maintainer engagement velocity.
46.0%
28.3h
20 repositories tagged #spdx
opossum-tool/OpossumUI
A light-weight app to audit and inventory large codebases for open source license compliance.
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
interlynk-io/sbomqs
sbomqs: The Comprehensive SBOM Quality & Compliance Tool
CycloneDX/cyclonedx-gradle-plugin
Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects
CycloneDX/specification
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
hashicorp/copywrite
Automate copyright headers and license files at scale
sbom-tool/sbom-tools
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
EmbarkStudios/cargo-about
📜 Cargo plugin to generate list of all licenses for a crate 🦀
CycloneDX/cyclonedx-core-java
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
kubernetes-sigs/bom
A utility to generate SPDX-compliant Bill of Materials manifests
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
spdx/spdx-spec
The System Package Data Exchange (SPDX) specification in Markdown and HTML formats.
fossology/fossology
FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.
spdx/license-list-data
Various data formats for the SPDX License List including RDFa, HTML, Text, and JSON
fsfe/reuse-tool
This is a mirror of https://codeberg.org/fsfe/reuse-tool
CycloneDX/cyclonedx-cli
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
CycloneDX/cyclonedx-dotnet
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects