sbom-tools
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
Activity
- Latest release
- 2w ago
- Total releases
- 25
- Cadence
- ~3 days
- Last 12 months
- 25
Reach
- Downloads
- 2.1k
- Stars
- 249
Details
- License
- MIT
- First release
- Feb 04, 2026
Releases