{"categories":[{"label":"Software Development","url":"https://skillfed.io/packages/category/software-development/4"},{"label":"Security","url":"https://skillfed.io/packages/category/security"},{"label":"Software Distribution","url":"https://skillfed.io/packages/category/system-software-distribution"}],"enrichment":{"capability":"Generates Software Bill of Materials (SBOM) documents in CycloneDX format from Python projects, virtual environments, and dependency manifests (Poetry, Pipenv, requirements.txt, PDM, uv).","skillfed_tags":["sbom-generation","supply-chain-security","compliance"],"use_cases":["Generate SBOMs for supply-chain security audits and compliance reporting","Create dependency inventories from Poetry or Pipenv projects for vulnerability scanning","Export Python virtual environment contents as standardized SBOM for CI/CD pipelines","Build component catalogs from requirements.txt for license and security analysis","Integrate SBOM generation into build tools to track software composition over time"],"what_it_does":"cyclonedx-bom is a command-line tool that reads Python project metadata and generates standardized SBOM documents in CycloneDX format. It works by scanning Python virtual environments, Poetry and Pipenv manifests, pip requirements files, and PDM/uv environments to extract dependency information, then serializes that data according to official CycloneDX specifications and optional namespace taxonomies for Python-specific properties.\n\nThe tool is designed for compliance and security workflows where you need a complete, accurate inventory of software components and their versions. It depends on cyclonedx-python-lib for the actual SBOM data structures, packageurl-python for component URLs, pip-requirements-parser for parsing requirements files, and chardet and tomli for encoding and configuration handling. The resulting SBOMs can approach OWASP SCVS Level-2 compliance (external signing required).","worth_installing":"Yes. The tool is actively maintained, has no known vulnerabilities, low install friction, and fills a specific compliance need\u2014generating standards-based SBOMs for Python projects. Install it if you need to produce CycloneDX documents for supply-chain security, regulatory compliance, or vulnerability tracking workflows."},"id":"cyclonedx-bom","links":{"html":"https://skillfed.io/packages/cyclonedx-bom","md":"https://skillfed.io/packages/cyclonedx-bom.md","pypi":"https://pypi.org/project/cyclonedx-bom/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-23","license_spdx":null,"license_treatment":"permissive","name":"cyclonedx-bom","python_support":"supports_current","summary":"CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments"},"popularity":{"monthly_downloads":2417736,"position":3073,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"7.3.1"}