{"categories":[{"label":"Build Tools","url":"https://skillfed.io/packages/category/software-development-build-tools/5"}],"enrichment":{"capability":"Generates Software Bill of Materials (SBOM) documents in CycloneDX format from Python projects, virtual environments, and package managers like Poetry, Pipenv, and pip.","skillfed_tags":["sbom-generation","supply-chain-security","compliance"],"use_cases":["Generate a complete SBOM from a Poetry or Pipenv project for supply-chain security audits.","Create an SBOM from a Python virtual environment to document all installed dependencies.","Convert pip requirements.txt files into standardized CycloneDX SBOM format for compliance.","Produce SBOMs that comply with OWASP SCVS criteria for software component verification."],"what_it_does":"cyclonedx-py is a command-line tool that generates Software Bill of Materials (SBOM) documents in CycloneDX format from Python projects and environments. It reads from multiple sources\u2014Python virtual environments, Poetry manifests and lockfiles, Pipenv manifests and lockfiles, and pip requirements.txt files\u2014and produces standardized SBOM output that follows official CycloneDX specifications and taxonomies. The tool is designed to be accurate and comprehensive for Python-related projects.\n\nThe package wraps the CycloneDX Python library and exposes a stable CLI interface. It does not provide a public Python API; all code is internal and subject to change. The tool aims to produce SBOMs that nearly meet OWASP Software Component Verification Standard Level-2 criteria (signing must be done externally). It is actively maintained and runs on Python >=3.9,<4.","worth_installing":"Yes, if you need to generate SBOMs for Python projects. The tool is actively maintained, has low install friction, and covers the most common Python dependency sources. Verify the license terms before use in proprietary contexts, and confirm it supports your specific package manager or environment setup."},"id":"cyclonedx-py","links":{"html":"https://skillfed.io/packages/cyclonedx-py","md":"https://skillfed.io/packages/cyclonedx-py.md","pypi":"https://pypi.org/project/cyclonedx-py/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2024-01-31","license_spdx":null,"license_treatment":"unclear","name":"cyclonedx-py","python_support":"unspecified","summary":"Alias for package 'cyclonedx-bom'"},"popularity":{"monthly_downloads":93724,"position":13366,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.1"}