Tamp.Sbom
Tamp's CycloneDX SBOM contract package: typed records (CycloneDxBom, Component, Vulnerability with inline VEX, Dependency, ...) plus load/write helpers and the ISbomSource/ISbomSink interfaces. Producers (Tamp.CycloneDx, Tamp.Syft) emit CycloneDxBom; sinks (Tamp.DependencyTrack) consume it. Chosen over SPDX for inline VEX support.
View on Github
Activity
- Latest release
- 3mo ago
- Total releases
- 4
- Cadence
- ~daily
- Last 12 months
- 4
Reach
- Stars
- 9
Details
- License
- MIT
- First release
- May 18, 2026
Releases
| Version | Released | |
|---|---|---|
1.13.0
minor
| ||
1.12.0
minor
| ||
1.11.1
patch
| ||
1.11.0
initial
|