CycloneDX Bill of Materials Specification
/All repositories
Overview
HEALTH SCORE
Healthy*
Partial score (2/3 categories)
52out of 65
Solid maintainer coverage. Development cadence keeps the score from reaching Excellent. Security & Supply Chain is unavailable, so weights were redistributed.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Healthy*(52/65)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 4 days.
Bus factor
11 active maintainers currently have merge rights.
Organization Diversity
Contributors span 66 organizations.
Project Achievements
LeaderboardsAbout
The CycloneDX Bill of Materials (BOM) Specification is an open standard for creating comprehensive software bills of materials (SBOM) that detail components, dependencies, and metadata in software applications. It provides a standardized format for describing and sharing software inventory information to improve supply chain transparency and security.
First commit
Software value
$4.1M
Tags
bill-of-materials
bom
cbom
cpe
cyclonedx
license
machine-learning
mbom
owasp
saasbom
sbom
software
software-bill-of-materials
spdx
specification
standard
supply-chain
swid
tc54
vex
License(s)
Apache-2.0
Data sources
Git
GitHub