purl

There are 1 repository under purl topic.

• dependency-track

  DependencyTrack / dependency-track

  Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

  appsecbill-of-materialsbomcomponent-analysiscyclonedxdevsecopsnvdossindexowasppackage-urlpurlsbomscasecuritysecurity-automationsoftware-composition-analysissoftware-securityvulndbvulnerabilitiesvulnerability-detection
  Language:Java 2469

• nexB / scancode-toolkit

  :mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensecopyrightpackagesdependenciesspdxprovenancelicense-scancopyright-scanlicensingspdx-licensesopen-source-licensingoss-compliancelicense-checkingsoftware-composition-analysispurlpackage-urlsbomscacyclonedxdependency-graph
  Language:Python 2029

• package-url / purl-spec

  A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

  cyclonedxdependenciespackagepackage-managementpackage-urlpurlsbomspdxurl
  645

• nexB / vulnerablecode

  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  cpecvecvssnvdossindexosvpackage-urlpurlsecuritysecurity-toolssnykvulndbvulnerabilityvulnerability-databasevulnerability-databasesvulnerability-detectionvulnerability-identificationvulnerability-scanners
  Language:Python 505

• CycloneDX / cdxgen

  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

  bomcbomcontainerscyclonedxdockerociowasppackage-urlpurlsaasbomsbomscasoftware-bill-of-materialssupply-chain
  Language:JavaScript 503
• cyclonedx-maven-plugin

  CycloneDX / cyclonedx-maven-plugin

  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  bomspdxmavenmaven-pluginbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorobommbomsaasbomvex
  Language:Java 282
• cyclonedx-cli

  CycloneDX / cyclonedx-cli

  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

  bombill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxspdxowaspsbom-generatorobommbomsaasbomvexhacktoberfest
  Language:C# 280
• cyclonedx-python

  CycloneDX / cyclonedx-python

  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonpipbomsbomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlcyclonedxowaspsbom-generatorpython3poetrycondarequirementsenvironmentsbom-tool
  Language:Python 227
• cyclonedx-dotnet

  CycloneDX / cyclonedx-dotnet

  Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

  bomspdxdotnetdotnet-corebill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorhacktoberfestobommbomsaasbomvex
  Language:C# 169
• cyclonedx-gradle-plugin

  CycloneDX / cyclonedx-gradle-plugin

  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  bomspdxgradlegradle-pluginbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generator
  Language:Java 147

• tiiuae / sbomnix

  A suite of utilities to help with software supply chain challenges on nix targets

  cyclonedxnixsbomsbom-generatorsbom-toolpythonbill-of-materialscpedependenciespurlsoftware-bill-of-materialssecurityspdx-sbomstatic-analysisvulnerability-scannerssoftware-supply-chainsoftware-supply-chain-security
  Language:Python 109

• nexB / scancode.io

  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  cyclonedxdockerfoss-compliancelicenseopen-sourcepackage-urlpurlscascancodesoftware-composition-analysisspdxvirtual-machinevulnerabilities
  Language:Python 95

• AppThreat / vulnerability-db

  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.

  vulnerability-detectioncvevulnerability-databasenvdcliscaadvisoriesdatabasepurlvers
  Language:Python 85

• CycloneDX / sbom-utility

  Utility that provides an API platform for validating, querying and managing BOM data

  sbombomcyclonedxsbom-toolspdxspdx-sbomvexspdx-licensebill-of-materialshacktoberfestmbomobomowasppackage-urlpurlsaasbomsoftware-bill-of-materialsvdrsbom-quality
  Language:Go 81
• cyclonedx-rust-cargo

  CycloneDX / cyclonedx-rust-cargo

  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  bomspdxrustcargocargo-pluginbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorobommbomsaasbomvex
  Language:Rust 79
• cyclonedx-core-java

  CycloneDX / cyclonedx-core-java

  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  bomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspobommbomsaasbomvexlibrary
  Language:Java 76

• package-url / packageurl-python

  Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

  purlpackage-urllibrarypythonhacktoberfest
  Language:Python 63
• cyclonedx-python-lib

  CycloneDX / cyclonedx-python-lib

  Python implementation of OWASP CycloneDX

  pythonowaspbomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxobommbomsaasbomvexsoftware-libraryattestationcbomlibrary
  Language:Python 61

• nikstur / bombon

  Nix CycloneDX Software Bills of Materials (SBOMs)

  cyclonedxnixnixossbombill-of-materialsbomsoftware-bill-of-materialslicensesbom-generatorcomponentsdependenciespurlspdx
  Language:Rust 55

• package-url / packageurl-go

  Go implementation of the package url spec

  purlpackage-urlgogolanglibrarygolang-librarygo-library
  Language:Go 53
• cyclonedx-php-composer

  CycloneDX / cyclonedx-php-composer

  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  bomspdxphpcomposer-pluginbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorcomposerdependency-graphsbom-tool
  Language:PHP 47

• VexStore / fatbom

  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool's strength.

  cpepurlsbomsupply-chain
  Language:Go 32

• nexB / purldb

  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  package-urlpurl
  Language:HTML 29

• nexB / univers

  Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

  purlpackage-urlversioningpackage-managerdependenciesdependency-resolverosvversionvulnerabilitiesvulnerablecode
  Language:Python 28
• cyclonedx-web-tool

  CycloneDX / cyclonedx-web-tool

  A web based tool for working with CycloneDX BOMs

  bombill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxowaspobommbomsaasbomvex
  Language:HTML 27
• cyclonedx-conan

  CycloneDX / cyclonedx-conan

  Creates CycloneDX Software Bill of Materials (SBOM) documents for C/C++ projects using Conan

  ccppowaspbomspdxpurlsbomcyclonedxsbom-generatorobommbomsaasbomvex
  Language:Python 24
• cyclonedx-webpack-plugin

  CycloneDX / cyclonedx-webpack-plugin

  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  bomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxwebpack-pluginwebpackowaspsbom-generatormbomjavascriptsbom-tool
  Language:JavaScript 24

• package-url / packageurl-java

  Java/JVM implementation of the package url spec

  purlpackage-urllibraryjavajvm-languages
  Language:Java 22

• package-url / packageurl-js

  JavaScript implementation of the package url spec

  purlpackage-urllibraryjavascript
  Language:JavaScript 22

• package-url / packageurl-swift

  Swift implementation of the package url spec

  purlpackage-url
  Language:Swift 21
• cyclonedx-ruby-gem

  CycloneDX / cyclonedx-ruby-gem

  Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

  bomspdxrubygembundlerbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorobommbomsaasbomvex
  Language:Ruby 19

• nexB / dejacode

  Automate open source license compliance and ensure software supply chain integrity

  cyclonedxfoss-compliancelicenseopen-sourcepackage-urlpurlscancodespdxscavulnerabilities
  Language:Python 18

• package-url / packageurl-dotnet

  .NET implementation of the package url spec

  purlpackage-urllibrarydot-net
  Language:C# 13

• phylum-dev / purl

  Package URL implementation for Rust

  package-urlpurl
  Language:Rust 10

• althonos / packageurl.rs

  Rust implementation of the Package URL specification.

  purlpackage-urlrustlibrary
  Language:Rust 8

• package-url / packageurl-php

  PHP implementation of the package url spec

  phplibrarypurlpackage-url
  Language:PHP 8