CycloneDX Python Library

shield_pypi-version shield_conda-forge-version shield_rtfd shield_gh-workflow-test shield_coverage shield_ossf-best-practices shield_license
shield_website shield_slack shield_groups shield_twitter-follow

OWASP CycloneDX is a full‑stack Bill of Materials (BOM) and system‑transparency standard that provides deep visibility into software, services, hardware, and AI components, enabling advanced supply‑chain security and cyber‑risk reduction.

This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.

[!NOTE]
This package is a software library not intended for standalone use.
For generating Software Bill of Materials (SBOM), check out CycloneDX Python or Jake.

Documentation

Complete documentation is available on Read the Docs. This includes:

  • Responsibilities & Capabilities
  • Install Instructions
  • API Reference
  • Usage Examples
  • Integration Guides
  • Best Practices

Python Support

We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.

Changelog

See our CHANGELOG.

Contributing

Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.

Copyright & License

CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.

Project links

Data verified by PyPI on Aug 10, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (11.12.0)

Owner

PyPI data
Data sourced directly from PyPI's database.

5 maintainers

PyPI data
Data sourced directly from PyPI's database.
Avatar for coderpatros from gravatar.com coderpatros Avatar for CycloneDX from gravatar.com CycloneDX Avatar for jkowalleck from gravatar.com jkowalleck
+2 more Avatar for madpah from gravatar.com madpah Avatar for sspringett from gravatar.com sspringett

Credits

Author: Paul Horton

Maintainer: Jan Kowalleck

GitHub Statistics

Data verified by PyPI on Aug 10, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python <4.0, >=3.9

Provides Extra

json-validation validation xml-validation

Tags

CycloneDX library OWASP SCA Software Bill of Materials Bill of Materials BOM SBOM VEX VDR OBOM MBOM SaaSBOM SPDX PackageURL PURL

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cyclonedx_python_lib-11.11.1.tar.gz (1.4 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cyclonedx_python_lib-11.11.1-py3-none-any.whl (528.7 kB view details)

Uploaded Python 3

File details

Details for the file cyclonedx_python_lib-11.11.1.tar.gz.

File metadata

  • Download URL: cyclonedx_python_lib-11.11.1.tar.gz
  • Upload date:
  • Size: 1.4 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cyclonedx_python_lib-11.11.1.tar.gz
Algorithm Hash digest
SHA256 e41f52bf399fc6346accd520a2b9a6e5a48b59f4dc27a471cd536c8d621d99f4
MD5 e888fee8a11a56da09876e73c4b0dae8
BLAKE2b-256 bd323380dc26e6f07d6b14997c2af51ff66d7c2427cc902de76854ba047a9c3b

See more details on using hashes here.

Provenance

The following attestation bundles were made for cyclonedx_python_lib-11.11.1.tar.gz:

Publisher: release.yml on CycloneDX/cyclonedx-python-lib

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cyclonedx_python_lib-11.11.1-py3-none-any.whl.

File metadata

File hashes

Hashes for cyclonedx_python_lib-11.11.1-py3-none-any.whl
Algorithm Hash digest
SHA256 a93a8288e90a55c7c7c578559a0f5fdd8b9318c59ddde1c7a9ac67ad6f36e354
MD5 99a852cc8a94ca18a4bfffe1624b2c15
BLAKE2b-256 bf91310a890f8f6fba3f3f98f8240013c48dc452e7c53d1483ffdbef1769aeec

See more details on using hashes here.

Provenance

The following attestation bundles were made for cyclonedx_python_lib-11.11.1-py3-none-any.whl:

Publisher: release.yml on CycloneDX/cyclonedx-python-lib

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

11.12.0

2 files

11.11.2

2 files

This release

11.11.1 This release

2 files

11.11.0

2 files

11.10.0

2 files

11.9.0

2 files

11.8.0

2 files

Pre-release

11.7.1a2

2 files

Pre-release

11.7.1a1

2 files

11.7.0

2 files

Pre-release

11.7.0rc4

2 files

Pre-release

11.7.0rc3

2 files

Pre-release

11.7.0rc2

2 files

Pre-release

11.7.0rc1

2 files

11.6.0

2 files

11.5.0

2 files

11.4.0

2 files

11.3.0

2 files

11.2.0

2 files

11.1.0

2 files

11.0.0

2 files

10.5.0

2 files

10.4.1

2 files

10.4.0

2 files

10.3.0

2 files

10.2.0

2 files

10.1.0

2 files

10.0.2

2 files

10.0.1

2 files

10.0.0

2 files

Pre-release

9.1.1rc1

2 files

9.1.0

2 files

9.0.2

2 files

Pre-release

9.0.1rc1

2 files

9.0.0

2 files

Pre-release

9.0.0rc1

2 files

8.9.0

2 files

8.8.0

2 files

8.7.0

2 files

8.6.0

2 files

8.5.1

2 files

8.5.0

2 files

8.4.0

2 files

8.3.0

2 files

8.2.1

2 files

8.2.0

2 files

8.1.0

2 files

8.0.0

2 files

Pre-release

8.0.0rc2

2 files

Pre-release

8.0.0rc1

2 files

Pre-release

8.0.0a1

2 files

7.6.2

2 files

7.6.1

2 files

7.6.0

2 files

7.5.1

2 files

7.5.0

2 files

7.4.1

2 files

7.4.0

2 files

7.3.4

2 files

7.3.3

2 files

7.3.2

2 files

Yanked

7.3.1

2 files

Yanked reason: This version had a flaw with reliable sorting of components, which had downstram implications. Please use version 7.3.2 or later

7.3.0

2 files

7.2.0

2 files

7.1.0

2 files

7.0.0

2 files

Pre-release

7.0.0a1

2 files

6.4.4

2 files

6.4.3

2 files

6.4.2

2 files

6.4.1

2 files

6.4.0

2 files

6.3.0

2 files

6.2.0

2 files

6.1.0

2 files

6.0.0

2 files

Pre-release

6.0.0rc3

2 files

Pre-release

6.0.0rc2

2 files

Pre-release

6.0.0rc1

2 files

5.2.0

2 files

5.1.1

2 files

5.1.0

2 files

5.0.1

2 files

5.0.0

2 files

Pre-release

5.0.0rc2

2 files

Pre-release

5.0.0rc1

2 files

4.2.3

2 files

4.2.2

2 files

4.2.1

2 files

4.2.0

2 files

4.1.0

2 files

4.0.1

2 files

4.0.0

2 files

Pre-release

4.0.0rc3

2 files

Pre-release

4.0.0rc2

2 files

Pre-release

4.0.0rc1

2 files

Pre-release

4.0.0rc0

2 files

3.1.5

2 files

3.1.4

2 files

3.1.3

2 files

3.1.2

2 files

3.1.1

2 files

3.1.0

2 files

Pre-release

3.0.0rc1

2 files

Pre-release

3.0.0rc0

2 files

2.7.1

2 files

2.7.0

2 files

2.6.0

2 files

2.5.2

2 files

2.5.1

2 files

2.5.0

2 files

2.4.0

2 files

2.3.0

2 files

2.2.0

2 files

2.1.1

2 files

2.1.0

2 files

2.0.0

2 files

Pre-release

2.0.0rc4

2 files

Pre-release

2.0.0rc3

2 files

Pre-release

2.0.0rc2

2 files

Pre-release

2.0.0rc1

2 files

Pre-release

2.0.0rc0

2 files

1.3.0

2 files

1.2.0

2 files

1.1.1

2 files

1.1.0

2 files

1.0.0

2 files

Pre-release

1.0.0rc3

2 files

Pre-release

1.0.0rc2

2 files

Pre-release

1.0.0rc1

2 files

Pre-release

1.0.0rc0

2 files

0.12.3

2 files

0.12.2

2 files

0.12.1

2 files

0.12.0

2 files

0.11.1

2 files

0.11.0

2 files

0.10.2

2 files

Yanked

0.10.1

2 files

Yanked reason: Broken build - use 0.10.2

0.10.0

2 files

0.9.1

2 files

0.9.0

2 files

0.8.3

2 files

0.8.2

2 files

0.8.1

2 files

0.8.0

2 files

0.7.0

2 files

0.6.2

2 files

0.6.1

2 files

0.6.0

2 files

0.5.0

2 files

0.4.1

2 files

0.4.0

2 files

0.3.0

2 files

0.2.0

2 files

0.1.0

2 files

0.0.11

2 files

0.0.10

2 files

0.0.9

2 files

0.0.8

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page