sbom-tools
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
Activity
- Latest release
- 1mo ago
- Total releases
- 24
- Cadence
- ~2 days
- Last 12 months
- 24
Reach
- Stars
- 238
Details
- License
- MIT
- First release
- Feb 04, 2026
Releases