CBOMkit
/All repositories
Overview
HEALTH SCORE
Fair
62out of 100
Maintainer coverage drags the score down. Security posture and development cadence help keep it from falling further.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Fair(62/100)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 19 days, but most repositories have response times over 90 days.
Bus factor
Only 4 active maintainers currently have merge rights.
Organization Diversity
Contributors span 29 organizations.
Project Achievements
LeaderboardsAbout
CBOMkit is a toolset for dealing with Cryptography Bill of Materials (CBOM). CBOMkit includes a
CBOM Generation (CBOMkit-hyperion, CBOMkit-theia): Generate CBOMs from source code by scanning git repositories to find the used cryptography.
CBOM Viewer (CBOMkit-coeus): Visualize a generated or uploaded CBOM and access comprehensive statistics.
CBOM Compliance Check: Evaluate CBOMs created or uploaded against specified compliance policies and receive detailed compliance status reports.
CBOM Database: Collect and store CBOMs into the database and expose this data through a RESTful API.
First commit
Software value
$6.5M
Tags
software-bill-of-materials
sbom
cyclonedx
software-composition-analysis
dependency-management
License(s)
Apache-2.0
CC-BY-4.0
Data sources
Git
GitHub