https://github.com/CycloneDX/cyclonedx-python-lib
attestation bill-of-materials bom cbom cyclonedx hacktoberfest library mbom obom owasp package-url purl python saasbom sbom software-bill-of-materials software-library spdx vex
Score: 26.705962854878223
Last synced: about 8 hours ago
JSON representation
Repository metadata:
Functionality and DataModels of OWASP CycloneDX for Python
- Host: GitHub
- URL: https://github.com/CycloneDX/cyclonedx-python-lib
- Owner: CycloneDX
- License: apache-2.0
- Created: 2021-08-27T06:56:39.000Z (about 5 years ago)
- Default Branch: main
- Last Pushed: 2026-10-24T19:12:36.000Z (10 days ago)
- Last Synced: 2026-10-29T11:05:56.559Z (5 days ago)
- Topics: attestation, bill-of-materials, bom, cbom, cyclonedx, hacktoberfest, library, mbom, obom, owasp, package-url, purl, python, saasbom, sbom, software-bill-of-materials, software-library, spdx, vex
- Language: Python
- Homepage: https://cyclonedx.org/
- Size: 3.52 MB
- Stars: 117
- Watchers: 11
- Forks: 67
- Open Issues: 66
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Codeowners: CODEOWNERS
- Support: docs/support.rst
- Notice: NOTICE
-
Funding:
- Custom: https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX
Owner metadata:
- Name: CycloneDX BOM Standard
- Login: CycloneDX
- Email:
- Kind: organization
- Description: CycloneDX is a modern standard for the software supply chain. SBOM, SaaSBOM, CBOM, OBOM, VEX, and more. CycloneDX is a OWASP project ratified as ECMA-424
- Website: https://cyclonedx.org/
- Location:
- Twitter: CycloneDX_Spec
- Company:
- Icon url: https://avatars.githubusercontent.com/u/29029855?v=4
- Repositories: 52
- Last Synced at: 2026-11-03T00:13:41.326Z
- Profile URL: https://github.com/CycloneDX
GitHub Events
Total
- Create event: 139
- Delete event: 103
- Fork event: 13
- Issue comment event: 365
- Issues event: 88
- Pull request event: 253
- Pull request review comment event: 166
- Pull request review event: 150
- Push event: 288
- Release event: 26
- Watch event: 21
- Total: 1612
Last Year
- Create event: 26
- Delete event: 28
- Fork event: 1
- Issue comment event: 52
- Issues event: 14
- Pull request event: 40
- Pull request review comment event: 28
- Pull request review event: 19
- Push event: 86
- Release event: 1
- Watch event: 4
- Total: 299
Committers metadata
Last synced: 1 day ago
Total Commits: 867
Total Committers: 41
Avg Commits per committer: 21.146
Development Distribution Score (DDS): 0.736
Commits in past year: 82
Committers in past year: 12
Avg Commits per committer in past year: 6.833
Development Distribution Score (DDS) in past year: 0.622
| Name | Commits | |
|---|---|---|
| dependabot[bot] | 4****] | 229 |
| Jan Kowalleck | j****k@g****m | 213 |
| Paul Horton | p****n@s****m | 201 |
| github-actions | a****n@g****m | 52 |
| semantic-release | s****e@b****l | 44 |
| semantic-release | s****e | 23 |
| Rodney Richardson | r****n@c****m | 17 |
| Jeffry Hesse | 5****r | 13 |
| cyclonedx-releases[bot] | 2****] | 7 |
| github-actions | g****s@g****m | 7 |
| Johannes Feichtner | 3****o | 6 |
| Saquib Saifee | s****2@g****m | 5 |
| Anton Grübel | a****l@g****m | 5 |
| Hakan Dilek | h****k | 4 |
| Indivar | i****a@g****m | 4 |
| Michael Schlenker | M****r@g****t | 3 |
| Peter Schuster | d****t@p****e | 3 |
| Copilot | 1****t | 2 |
| Dan Rollo | d****o@g****m | 2 |
| Quentin Kaiser | 5****r | 2 |
| Roland Weber | r****r | 2 |
| Souta Kawahara | 1****a | 2 |
| weichslgartner | w****r@g****m | 2 |
| Shurong Cao | 3****6@q****m | 2 |
| simo | 1****9 | 1 |
| rcross-lc | 1****c | 1 |
| jblu42 | 8****2 | 1 |
| William Woodruff | w****m@y****t | 1 |
| Stefan | 9****6 | 1 |
| Riku | 3****r | 1 |
| and 11 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 142
Total pull requests: 699
Average time to close issues: 2 months
Average time to close pull requests: 17 days
Total issue authors: 50
Total pull request authors: 40
Average comments per issue: 1.92
Average comments per pull request: 1.35
Merged pull request: 457
Bot issues: 0
Bot pull requests: 351
Past year issues: 6
Past year pull requests: 47
Past year average time to close issues: 10 days
Past year average time to close pull requests: 12 days
Past year issue authors: 5
Past year pull request authors: 13
Past year average comments per issue: 1.17
Past year average comments per pull request: 3.77
Past year merged pull request: 18
Past year bot issues: 0
Past year bot pull requests: 19
Top Issue Authors
- jkowalleck (59)
- madpah (14)
- schlenk (5)
- Joerki (3)
- hakandilek (3)
- chistyakov (3)
- Churro (2)
- jkugler (2)
- bollwyvl (2)
- behnazh-w (2)
- saquibsaifee (2)
- maitrey (2)
- pombredanne (2)
- rolweber (2)
- wkoot (2)
Top Pull Request Authors
- dependabot[bot] (351)
- jkowalleck (211)
- madpah (23)
- saquibsaifee (20)
- hakandilek (13)
- indiVar0508 (8)
- Churro (7)
- schlenk (5)
- wkoot (4)
- gruebel (4)
- KAWAHARA-souta (4)
- rolweber (3)
- weichslgartner (3)
- OxPirates (2)
- CAOShurong (2)
Top Issue Labels
- enhancement (40)
- bug (27)
- help wanted (18)
- breaking change (15)
- chore (9)
- question (9)
- documentation (7)
- schema 1.5 (6)
- schema 1.4 (5)
- QA (4)
- schema 1.6 (4)
- CI (4)
- CT (3)
- build (3)
- dependencies (3)
- good first issue (3)
- schema 1.7 (1)
- schema 1.3 (1)
- hacktoberfest (1)
- blocked (1)
- duplicate (1)
- performance (1)
- discussion (1)
- idea (1)
Top Pull Request Labels
- dependencies (360)
- enhancement (105)
- bug (63)
- breaking change (56)
- documentation (47)
- chore (33)
- QA (27)
- schema 1.5 (16)
- schema 1.6 (15)
- CT (12)
- CI (12)
- schema 1.7 (5)
- performance (5)
- schema 1.4 (2)
- build (1)
- refactor (1)
- invalid (1)
- idea (1)
Package metadata
- Total packages: 15
-
Total downloads:
- pypi: 32,297,091 last-month
- Total docker downloads: 20,549,309
- Total dependent packages: 25 (may contain duplicates)
- Total dependent repositories: 132 (may contain duplicates)
- Total versions: 349
- Total maintainers: 6
nixpkgs-unstable: python314Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L90
- Licenses: Apache-2.0
- Latest release: 11.12.0 (published 2 days ago)
- Last Synced: 2026-11-01T11:25:42.239Z (2 days ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 3.097%
- Forks count: 4.873%
- Stargazers count: 7.514%
- Maintainers (1)
pypi.org: cyclonedx-python-lib
Python library for CycloneDX
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib/#readme
- Documentation: https://cyclonedx-python-library.readthedocs.io/
- Licenses: Apache-2.0
- Latest release: 11.12.0 (published 3 months ago)
- Last Synced: 2026-11-02T01:47:53.247Z (1 day ago)
- Versions: 161
- Dependent Packages: 22
- Dependent Repositories: 127
- Downloads: 32,297,091 Last month
- Docker Downloads: 20,549,309
-
Rankings:
- Downloads: 0.325%
- Docker downloads count: 0.588%
- Dependent packages count: 0.76%
- Dependent repos count: 1.321%
- Average: 3.573%
- Forks count: 8.277%
- Stargazers count: 10.167%
- Maintainers (5)
-
Funding:
- https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX
proxy.golang.org: github.com/cyclonedx/cyclonedx-python-lib
- Homepage:
- Documentation: https://pkg.go.dev/github.com/cyclonedx/cyclonedx-python-lib#section-documentation
- Licenses: apache-2.0
- Latest release: v11.12.0+incompatible (published 3 months ago)
- Last Synced: 2026-11-02T01:36:32.863Z (1 day ago)
- Versions: 152
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.273%
- Average: 4.416%
- Dependent repos count: 4.56%
nixpkgs-unstable: python313Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L90
- Licenses: Apache-2.0
- Latest release: 11.12.0 (published 2 days ago)
- Last Synced: 2026-11-01T10:50:19.512Z (2 days ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Forks count: 9.705%
- Average: 13.54%
- Stargazers count: 17.375%
- Maintainers (1)
conda-forge.org: cyclonedx-python-lib
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Licenses: Apache-2.0
- Latest release: 3.1.0 (published about 4 years ago)
- Last Synced: 2026-03-11T13:41:54.478Z (8 months ago)
- Versions: 22
- Dependent Packages: 3
- Dependent Repositories: 5
-
Rankings:
- Dependent repos count: 14.674%
- Dependent packages count: 15.618%
- Average: 28.916%
- Forks count: 39.9%
- Stargazers count: 45.47%
nixpkgs-24.05: python311Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L88
- Licenses: Apache-2.0
- Latest release: 7.3.4 (published 9 months ago)
- Last Synced: 2026-04-28T14:05:57.600Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
nixpkgs-23.11: python310Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L94
- Licenses: Apache-2.0
- Latest release: 5.1.1 (published 9 months ago)
- Last Synced: 2026-03-08T23:27:10.937Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
nixpkgs-24.11: python312Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L96
- Licenses: Apache-2.0
- Latest release: 7.6.2 (published 9 months ago)
- Last Synced: 2026-03-07T15:18:16.578Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
nixpkgs-23.05: python311Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L85
- Licenses: Apache-2.0
- Latest release: 4.0.0 (published 9 months ago)
- Last Synced: 2026-09-10T23:27:59.782Z (about 2 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
nixpkgs-23.05: python310Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L85
- Licenses: Apache-2.0
- Latest release: 4.0.0 (published 9 months ago)
- Last Synced: 2026-07-25T03:01:10.288Z (3 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
nixpkgs-24.11: python311Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L96
- Licenses: Apache-2.0
- Latest release: 7.6.2 (published 9 months ago)
- Last Synced: 2026-03-09T08:11:11.043Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
nixpkgs-23.11: python311Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L94
- Licenses: Apache-2.0
- Latest release: 5.1.1 (published 9 months ago)
- Last Synced: 2026-03-08T10:39:16.338Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
pkgsrc-netbsd-x86_64-10.1-all: security/py-cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://pkgsrc.se/security/py-cyclonedx-python-lib
- Licenses: apache-2.0
- Latest release: 11.6.0 (published 8 months ago)
- Last Synced: 2026-05-27T09:38:10.563Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
nixpkgs-24.05: python312Packages.cyclonedx-python-lib
Python library for generating CycloneDX SBOMs
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/cyclonedx-python-lib/default.nix#L88
- Licenses: Apache-2.0
- Latest release: 7.3.4 (published 9 months ago)
- Last Synced: 2026-05-13T02:04:36.606Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
debian-13: cyclonedx-python-lib
- Homepage: https://github.com/CycloneDX/cyclonedx-python-lib/
- Documentation: https://packages.debian.org/trixie/cyclonedx-python-lib
- Licenses: apache-2.0
- Latest release: 9.1.0-2 (published 9 months ago)
- Last Synced: 2026-03-13T16:10:42.321Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
- Sphinx >=4.3.2
- m2r2 >=0.3.2
- sphinx-autoapi >=1.8.4
- sphinx-rtd-theme >=1.0.0
- autopep8 ^1.6.0 develop
- coverage ^6.2 develop
- flake8 ^4.0.1 develop
- flake8-annotations ^2.7.0 develop
- flake8-bugbear ^22.6.22 develop
- flake8-isort ^4.1.0 develop
- isort ^5.10.0 develop
- jsonschema >= 4.4.0 develop
- lxml >=4.7.0 develop
- mypy >= 0.920, < 1.00 develop
- tox ^3.25.0 develop
- types-setuptools >= 57.0.0 develop
- types-toml ^0.10.0 develop
- xmldiff >=2.4 develop
- importlib-metadata >= 3.4
- packageurl-python >= 0.9
- python ^3.6
- setuptools >= 47.0.0
- sortedcontainers ^2.4.0
- toml ^0.10.0
- Gr1N/setup-poetry v8 composite
- actions/checkout v4 composite
- actions/download-artifact v3 composite
- actions/setup-python v4 composite
- actions/upload-artifact v3 composite
- codacy/codacy-coverage-reporter-action v1 composite
- actions/checkout v4 composite
- actions/setup-python v4 composite
- pypa/gh-action-pypi-publish release/v1 composite
- python-semantic-release/python-semantic-release v8.0.8 composite
- python-semantic-release/upload-to-gh-release main composite
- snok/install-poetry v1 composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- zizmorcore/zizmor-action 70fb788f84895a7701f5643d103d587e460b5c99 composite