CycloneDX/specification

specification

✅ Recently maintained

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

572Stars
98Forks
+37-day stars

XSLT · Apache-2.0 · Last push 2026-10-31

Official repository & installation ↗
bill-of-materialsbomsoftwarespdxcpelicensesoftware-bill-of-materialssbomcyclonedxswid

Star history

2025-09-292026-11-02
View historical data
DateStars
2026-10-04557
2026-10-05557
2026-10-06558
2026-10-07559
2026-10-08560
2026-10-09560
2026-10-10560
2026-10-11561
2026-10-12561
2026-10-13563
2026-10-14564
2026-10-15566
2026-10-16566
2026-10-17566
2026-10-18566
2026-10-19567
2026-10-20567
2026-10-21568
2026-10-22569
2026-10-23569
2026-10-24569
2026-10-25569
2026-10-26569
2026-10-27569
2026-10-28569
2026-10-29569
2026-10-30570
2026-10-31570
2026-11-01572
2026-11-02572

Get the project

git clone https://github.com/CycloneDX/specification.git

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.

rea

Use AI agents to reverse engineer app behavior and native binaries with tool integrations.

★ 419,787openclaw

Cross-platform open-source personal AI assistant focused on data ownership, written in TypeScript for self-hosting.

★ 393,671deepseek-harness

DeepSeek's open-source agent framework where every capability is built as a plugin.

★ 268,697