---
id: cyclonedx-python-lib
version: "11.12.0"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# cyclonedx-python-lib — Python library for CycloneDX

License: permissive · Maintenance: active · Popularity: top 1,000 on PyPI

## Install

pip install cyclonedx-python-lib
uv add cyclonedx-python-lib
poetry add cyclonedx-python-lib

## Description

# CycloneDX Python Library

[![shield_pypi-version]][link_pypi]
[![shield_conda-forge-version]][link_conda-forge]
[![shield_rtfd]][link_rtfd]
[![shield_gh-workflow-test]][link_gh-workflow-test]
[![shield_coverage]][link_codacy]
[![shield_ossf-best-practices]][link_ossf-best-practices]
[![shield_license]][license_file]  
[![shield_website]][link_website]
[![shield_slack]][link_slack]
[![shield_groups]][link_discussion]
[![shield_twitter-follow]][link_twitter]

----

OWASP  [CycloneDX][link_website] is a full‑stack Bill of Materials (BOM) and system‑transparency standard
that provides deep visibility into software, services, hardware, and AI components, enabling advanced supply‑chain security and cyber‑risk reduction.

This Python package provides data models, validators and more,
to help you create/render/read CycloneDX documents.

> [!NOTE]  
> This package is a software library not intended for standalone use.  
> For generating Software Bill of Materials (SBOM), check out [CycloneDX Python][cyclonedx-python] or [Jake][jake].

## Documentation

Complete documentation is available on [Read the Docs][link_rtfd]. This includes:
- Responsibilities & Capabilities
- Install...

## AI interpretation — verify before relying

Provides data models, validators, and serialization tools for creating, reading, and rendering CycloneDX Bill of Materials (BOM) documents to enable software supply-chain visibility and security analysis.

Verdict: Production-ready library for CycloneDX document handling with strong maintenance signals, permissive licensing, and no known vulnerabilities. Best suited as a dependency for tools that need to create or consume BOM data rather than as a direct end-user application.

[View on SkillFed](https://skillfed.io/packages/cyclonedx-python-lib) · [View on PyPI](https://pypi.org/project/cyclonedx-python-lib/)