Python library for CycloneDX

Navigation

Verified details

These details have been verified by PyPI
Project links
Owner
GitHub Statistics
Maintainers
Avatar for coderpatros from gravatar.com coderpatros Avatar for CycloneDX from gravatar.com CycloneDX Avatar for jkowalleck from gravatar.com jkowalleck Avatar for madpah from gravatar.com madpah Avatar for sspringett from gravatar.com sspringett

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Apache Software License (Apache-2.0)
  • Author: Paul Horton
  • Maintainer: Jan Kowalleck
  • Tags CycloneDX , library , OWASP , SCA , Software Bill of Materials , Bill of Materials , BOM , SBOM , VEX , VDR , OBOM , MBOM , SaaSBOM , SPDX , PackageURL , PURL
  • Requires: Python <4.0, >=3.9
  • Provides-Extra: json-validation , validation , xml-validation
Classifiers
Report project as malware

Project description

CycloneDX Python Library

shield_pypi-version shield_conda-forge-version shield_rtfd shield_gh-workflow-test shield_coverage shield_ossf-best-practices shield_license
shield_website shield_slack shield_groups shield_twitter-follow

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction.

This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.

[!NOTE]
This package is a software library not intended for standalone use.
For generating Software Bill of Materials (SBOM), check out CycloneDX Python or Jake.

Documentation

Complete documentation is available on Read the Docs. This includes:

  • Responsibilities & Capabilities
  • Install Instructions
  • API Reference
  • Usage Examples
  • Integration Guides
  • Best Practices

Python Support

We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.

Changelog

See our CHANGELOG.

Contributing

Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.

Copyright & License

CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.

Project details

Verified details

These details have been verified by PyPI
Project links
Owner
GitHub Statistics
Maintainers
Avatar for coderpatros from gravatar.com coderpatros Avatar for CycloneDX from gravatar.com CycloneDX Avatar for jkowalleck from gravatar.com jkowalleck Avatar for madpah from gravatar.com madpah Avatar for sspringett from gravatar.com sspringett

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Apache Software License (Apache-2.0)
  • Author: Paul Horton
  • Maintainer: Jan Kowalleck
  • Tags CycloneDX , library , OWASP , SCA , Software Bill of Materials , Bill of Materials , BOM , SBOM , VEX , VDR , OBOM , MBOM , SaaSBOM , SPDX , PackageURL , PURL
  • Requires: Python <4.0, >=3.9
  • Provides-Extra: json-validation , validation , xml-validation
Classifiers

Release history Release notifications | RSS feed

11.7.0

11.7.0rc4 pre-release

This version

11.7.0rc3 pre-release

11.7.0rc2 pre-release

11.7.0rc1 pre-release

11.6.0

11.5.0

11.4.0

11.3.0

11.2.0

11.1.0

11.0.0

10.5.0

10.4.1

10.4.0

10.3.0

10.2.0

10.1.0

10.0.2

10.0.1

10.0.0

9.1.1rc1 pre-release

9.1.0

9.0.2

9.0.1rc1 pre-release

9.0.0

9.0.0rc1 pre-release

8.9.0

8.8.0

8.7.0

8.6.0

8.5.1

8.5.0

8.4.0

8.3.0

8.2.1

8.2.0

8.1.0

8.0.0

8.0.0rc2 pre-release

8.0.0rc1 pre-release

8.0.0a1 pre-release

7.6.2

7.6.1

7.6.0

7.5.1

7.5.0

7.4.1

7.4.0

7.3.4

7.3.3

7.3.2

7.3.1 yanked

Reason this release was yanked:

This version had a flaw with reliable sorting of components, which had downstram implications. Please use version 7.3.2 or later

7.3.0

7.2.0

7.1.0

7.0.0

7.0.0a1 pre-release

6.4.4

6.4.3

6.4.2

6.4.1

6.4.0

6.3.0

6.2.0

6.1.0

6.0.0

6.0.0rc3 pre-release

6.0.0rc2 pre-release

6.0.0rc1 pre-release

5.2.0

5.1.1

5.1.0

5.0.1

5.0.0

5.0.0rc2 pre-release

5.0.0rc1 pre-release

4.2.3

4.2.2

4.2.1

4.2.0

4.1.0

4.0.1

4.0.0

4.0.0rc3 pre-release

4.0.0rc2 pre-release

4.0.0rc1 pre-release

4.0.0rc0 pre-release

3.1.5

3.1.4

3.1.3

3.1.2

3.1.1

3.1.0

3.0.0rc1 pre-release

3.0.0rc0 pre-release

2.7.1

2.7.0

2.6.0

2.5.2

2.5.1

2.5.0

2.4.0

2.3.0

2.2.0

2.1.1

2.1.0

2.0.0

2.0.0rc4 pre-release

2.0.0rc3 pre-release

2.0.0rc2 pre-release

2.0.0rc1 pre-release

2.0.0rc0 pre-release

1.3.0

1.2.0

1.1.1

1.1.0

1.0.0

1.0.0rc3 pre-release

1.0.0rc2 pre-release

1.0.0rc1 pre-release

1.0.0rc0 pre-release

0.12.3

0.12.2

0.12.1

0.12.0

0.11.1

0.11.0

0.10.2

0.10.1 yanked

Reason this release was yanked:

Broken build - use 0.10.2

0.10.0

0.9.1

0.9.0

0.8.3

0.8.2

0.8.1

0.8.0

0.7.0

0.6.2

0.6.1

0.6.0

0.5.0

0.4.1

0.4.0

0.3.0

0.2.0

0.1.0

0.0.11

0.0.10

0.0.9

0.0.8

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cyclonedx_python_lib-11.7.0rc3.tar.gz (1.4 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cyclonedx_python_lib-11.7.0rc3-py3-none-any.whl (513.1 kB view details)

Uploaded Python 3

File details

Details for the file cyclonedx_python_lib-11.7.0rc3.tar.gz.

File metadata

  • Download URL: cyclonedx_python_lib-11.7.0rc3.tar.gz
  • Upload date:
  • Size: 1.4 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cyclonedx_python_lib-11.7.0rc3.tar.gz
Algorithm Hash digest
SHA256 35a65c31bddcff30e51457d38ac9749983bb6a73458aed257dfb023a6b8ec34b
MD5 e248b3eb249a73c2d49f05e424b2a2d9
BLAKE2b-256 032d25bd8ead07ffe50d24e10373a1f949e9b8420b4bae199db2961dd1ae185d

See more details on using hashes here.

Provenance

The following attestation bundles were made for cyclonedx_python_lib-11.7.0rc3.tar.gz:

Publisher: release.yml on CycloneDX/cyclonedx-python-lib

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cyclonedx_python_lib-11.7.0rc3-py3-none-any.whl.

File metadata

File hashes

Hashes for cyclonedx_python_lib-11.7.0rc3-py3-none-any.whl
Algorithm Hash digest
SHA256 ef08f52a1245cb5cc43ccb8ac0ffdc4de820215d50ec0dded583a08a51c1082d
MD5 a6e8b8fbd10ff6bd475bb8107d3ca8c5
BLAKE2b-256 7e596bc9713de70b200addb3ed9f4c4b07efb9518e84808d86accc89db8836ee

See more details on using hashes here.

Provenance

The following attestation bundles were made for cyclonedx_python_lib-11.7.0rc3-py3-none-any.whl:

Publisher: release.yml on CycloneDX/cyclonedx-python-lib

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page